# =============================================================================
# Secret para GitLab Registry Storage (Hetzner S3)
# =============================================================================
# Usado por: Container Registry
# Formato diferente do object-storage (registry usa config YAML)
#
# Variáveis substituídas pelo setup.sh via envsubst:
#   - S3_BUCKET, S3_ACCESS_KEY, S3_SECRET_KEY, S3_REGION, S3_ENDPOINT
#
apiVersion: v1
kind: Secret
metadata:
  name: gitlab-registry-storage
  namespace: gitlab
type: Opaque
stringData:
  config: |
    s3:
      bucket: ${S3_BUCKET}
      accesskey: ${S3_ACCESS_KEY}
      secretkey: ${S3_SECRET_KEY}
      region: ${S3_REGION}
      regionendpoint: https://${S3_ENDPOINT}
      v4auth: true