apiVersion: v1
kind: Secret
metadata:
  name: database-secrets
  namespace: bakery-ia
  labels:
    app.kubernetes.io/name: bakery-ia
    app.kubernetes.io/component: database
type: Opaque
data:
  # Database Users (base64 encoded)
  AUTH_DB_USER: YmFrZXJ5X2F1dGg=  # bakery_auth
  TENANT_DB_USER: YmFrZXJ5X3RlbmFudA==  # bakery_tenant
  TRAINING_DB_USER: YmFrZXJ5X3RyYWluaW5n  # bakery_training
  FORECASTING_DB_USER: YmFrZXJ5X2ZvcmVjYXN0aW5n  # bakery_forecasting
  SALES_DB_USER: YmFrZXJ5X3NhbGVz  # bakery_sales
  EXTERNAL_DB_USER: YmFrZXJ5X2V4dGVybmFs  # bakery_external
  NOTIFICATION_DB_USER: YmFrZXJ5X25vdGlmaWNhdGlvbg==  # bakery_notification
  INVENTORY_DB_USER: YmFrZXJ5X2ludmVudG9yeQ==  # bakery_inventory
  RECIPES_DB_USER: YmFrZXJ5X3JlY2lwZXM=  # bakery_recipes
  SUPPLIERS_DB_USER: YmFrZXJ5X3N1cHBsaWVycw==  # bakery_suppliers
  POS_DB_USER: YmFrZXJ5X3Bvcw==  # bakery_pos
  ORDERS_DB_USER: YmFrZXJ5X29yZGVycw==  # bakery_orders
  PRODUCTION_DB_USER: YmFrZXJ5X3Byb2R1Y3Rpb24=  # bakery_production
  ALERT_PROCESSOR_DB_USER: YmFrZXJ5X2FsZXJ0X3Byb2Nlc3Nvcg==  # bakery_alert_processor

  # Database Passwords (base64 encoded - change these in production!)
  AUTH_DB_PASSWORD: ZGV2X3Bhc3N3b3JkXzEyMw==  # dev_password_123
  TENANT_DB_PASSWORD: ZGV2X3Bhc3N3b3JkXzEyMw==  # dev_password_123
  TRAINING_DB_PASSWORD: ZGV2X3Bhc3N3b3JkXzEyMw==  # dev_password_123
  FORECASTING_DB_PASSWORD: ZGV2X3Bhc3N3b3JkXzEyMw==  # dev_password_123
  SALES_DB_PASSWORD: ZGV2X3Bhc3N3b3JkXzEyMw==  # dev_password_123
  EXTERNAL_DB_PASSWORD: ZGV2X3Bhc3N3b3JkXzEyMw==  # dev_password_123
  NOTIFICATION_DB_PASSWORD: ZGV2X3Bhc3N3b3JkXzEyMw==  # dev_password_123
  INVENTORY_DB_PASSWORD: ZGV2X3Bhc3N3b3JkXzEyMw==  # dev_password_123
  RECIPES_DB_PASSWORD: ZGV2X3Bhc3N3b3JkXzEyMw==  # dev_password_123
  SUPPLIERS_DB_PASSWORD: ZGV2X3Bhc3N3b3JkXzEyMw==  # dev_password_123
  POS_DB_PASSWORD: ZGV2X3Bhc3N3b3JkXzEyMw==  # dev_password_123
  ORDERS_DB_PASSWORD: ZGV2X3Bhc3N3b3JkXzEyMw==  # dev_password_123
  PRODUCTION_DB_PASSWORD: ZGV2X3Bhc3N3b3JkXzEyMw==  # dev_password_123
  ALERT_PROCESSOR_DB_PASSWORD: ZGV2X3Bhc3N3b3JkXzEyMw==  # dev_password_123

---
apiVersion: v1
kind: Secret
metadata:
  name: redis-secrets
  namespace: bakery-ia
  labels:
    app.kubernetes.io/name: bakery-ia
    app.kubernetes.io/component: redis
type: Opaque
data:
  REDIS_PASSWORD: ZGV2X3JlZGlzXzEyMw==  # dev_redis_123

---
apiVersion: v1
kind: Secret
metadata:
  name: rabbitmq-secrets
  namespace: bakery-ia
  labels:
    app.kubernetes.io/name: bakery-ia
    app.kubernetes.io/component: rabbitmq
type: Opaque
data:
  RABBITMQ_USER: YmFrZXJ5X3VzZXI=  # bakery_user
  RABBITMQ_PASSWORD: ZGV2X3JhYmJpdF8xMjM=  # dev_rabbit_123

---
apiVersion: v1
kind: Secret
metadata:
  name: jwt-secrets
  namespace: bakery-ia
  labels:
    app.kubernetes.io/name: bakery-ia
    app.kubernetes.io/component: auth
type: Opaque
data:
  JWT_SECRET_KEY: ZGV2X2p3dF9zZWNyZXRfa2V5XzEyMzQ1Njc4OTA=  # dev_jwt_secret_key_1234567890
  JWT_REFRESH_SECRET_KEY: ZGV2X2p3dF9yZWZyZXNoX3NlY3JldF9rZXlfMTIzNDU2Nzg5MA==  # dev_jwt_refresh_secret_key_1234567890

---
apiVersion: v1
kind: Secret
metadata:
  name: monitoring-secrets
  namespace: bakery-ia
  labels:
    app.kubernetes.io/name: bakery-ia
    app.kubernetes.io/component: monitoring
type: Opaque
data:
  GRAFANA_ADMIN_USER: YWRtaW4=  # admin
  GRAFANA_ADMIN_PASSWORD: ZGV2X2dyYWZhbmFfMTIz  # dev_grafana_123