# OPTIONAL — the clean GitOps way to handle the password: create the secret
# out-of-band (or via SealedSecrets/SOPS/ExternalSecrets), then set
# auth.existingSecret: redis-auth in the Application's valuesObject.
#
# Do NOT commit a real password to git. Either apply this once by hand with a
# real value:
#
#   kubectl create secret generic redis-auth -n redis \
#     --from-literal=redis-password="$(openssl rand -base64 24)"
#
# ...or encrypt this file with your secret-management tool of choice.
apiVersion: v1
kind: Secret
metadata:
  name: redis-auth
  namespace: redis
type: Opaque
stringData:
  redis-password: CHANGE-ME