1 files changed, 31 insertions, 0 deletions
diff --git a/k8s/daemon/secret.yaml b/k8s/daemon/secret.yaml
new file mode 100644
index 0000000..74b0e13
--- /dev/null
+++ b/k8s/daemon/secret.yaml
@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: makima-daemon-secrets
+  labels:
+    app: makima-daemon
+    app.kubernetes.io/name: makima-daemon
+    app.kubernetes.io/component: daemon
+    app.kubernetes.io/part-of: makima
+type: Opaque
+stringData:
+  # REQUIRED: Your Makima API key for daemon authentication
+  api-key: "REPLACE_WITH_YOUR_API_KEY"
+  # OPTIONAL: GitHub personal access token for gh CLI and git operations
+  github-token: "REPLACE_WITH_YOUR_GITHUB_TOKEN"
+---
+# Optional: SSH keys for git authentication over SSH
+# Create with: kubectl create secret generic makima-daemon-ssh \
+#   --from-file=id_ed25519=/path/to/key \
+#   --from-file=known_hosts=/path/to/known_hosts
+apiVersion: v1
+kind: Secret
+metadata:
+  name: makima-daemon-ssh
+  labels:
+    app: makima-daemon
+    app.kubernetes.io/name: makima-daemon
+    app.kubernetes.io/component: daemon
+    app.kubernetes.io/part-of: makima
+type: Opaque
+data: {}