# Example only. Create a private per-dispatch Secret; never commit real values.
apiVersion: v1
kind: Secret
metadata:
  name: ql3-security-administration-input
  namespace: qinglong3-system
type: Opaque
immutable: true
stringData:
  command.json: |
    {"schemaVersion":1,"operation":"audit.list","request":{"limit":25,"filter":{"outcome":"allowed"}}}
  assertion.jwt: REPLACE_WITH_SHORT_LIVED_MULTI_FACTOR_ASSERTION
  keyset.json: REPLACE_WITH_PINNED_SECURITY_ADMINISTRATION_KEYSET
  pepper-keyring.json: |
    {"schemaVersion":1,"activePepperKeyId":"REPLACE_WITH_ACTIVE_KEY_ID","keys":[{"pepperKeyId":"REPLACE_WITH_ACTIVE_KEY_ID","pepper":"REPLACE_WITH_CANONICAL_32_BYTE_BASE64URL_API_CREDENTIAL_PEPPER"}]}