feat(auth): support per-deploy login password key override

Multi-replica deployments need every Pod/container to share one RSA private key, otherwise public keys handed to the browser may not match the key that decrypts the resulting ciphertext. Introduce a `*.local.yaml` override layer that ops-config and tenant-config both load on top of the base config, ship example overrides plus compose/k3s wiring, and tolerate PEM bodies that arrive folded or escaped from Secrets.
2026-05-14 11:54:40 +08:00
parent 2bc192b3c7
commit b939cfa2fa
16 changed files with 310 additions and 10 deletions
@@ -556,6 +556,11 @@ spec:
                  items:
                    - key: ops-config.yaml
                      path: ops-config.yaml
+              - secret:
+                  name: geo-rankly-app-secret
+                  items:
+                    - key: ops-config.local.yaml
+                      path: ops-config.local.yaml
 ---
 apiVersion: v1
 kind: Service