# Template for the towerops-llm secret. Apply with values filled in:
#
#   kubectl create secret generic towerops-llm \
#     --from-literal=DEEPSEEK_API_KEY="<your-deepseek-key>" \
#     --from-literal=DEEPSEEK_MODEL="deepseek-v4-pro" \
#     -n towerops
#
# Or apply this file directly after replacing the placeholder strings with
# your real values, then run: kubectl apply -f k8s/towerops-llm-secret.example.yaml
#
# This file is committed as a placeholder — DO NOT put real keys in here.
# Real values live in 1Password and are created in the cluster manually.
#
# The deployment references this secret with `optional: true`, so the app
# will start fine without it (LLM enrichment just stays no-op).
---
apiVersion: v1
kind: Secret
metadata:
  name: towerops-llm
  namespace: towerops
type: Opaque
stringData:
  # DeepSeek API key — get one at https://platform.deepseek.com/
  DEEPSEEK_API_KEY: ""
  # Optional: override the default model (default: deepseek-v4-pro)
  DEEPSEEK_MODEL: ""