# =============================================================================
# Secret para GitLab Object Storage (Hetzner S3)
# =============================================================================
# Usado por: uploads, artifacts, lfs, packages, etc.
#
# Variáveis substituídas pelo setup.sh via envsubst:
#   - S3_REGION, S3_ACCESS_KEY, S3_SECRET_KEY, S3_ENDPOINT
#
apiVersion: v1
kind: Secret
metadata:
  name: gitlab-object-storage
  namespace: gitlab
type: Opaque
stringData:
  connection: |
    provider: AWS
    region: ${S3_REGION}
    aws_access_key_id: ${S3_ACCESS_KEY}
    aws_secret_access_key: ${S3_SECRET_KEY}
    endpoint: https://${S3_ENDPOINT}
    path_style: true