# PLACEHOLDER — seal with htwg-1 cluster key before use:
#   kubectl -n nowchess create secret docker-registry ghcr-pull-secret \
#     --docker-server=ghcr.io --docker-username=<user> --docker-password=<token> \
#     --dry-run=client -o yaml | kubeseal --controller-namespace kube-system -o yaml > this-file.yaml
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
  name: ghcr-pull-secret
  namespace: nowchess
spec:
  encryptedData:
    .dockerconfigjson: REPLACE_WITH_SEALED_VALUE
  template:
    type: kubernetes.io/dockerconfigjson
    metadata:
      name: ghcr-pull-secret
      namespace: nowchess