apiVersion: v1
kind: Secret
metadata:
  name: infisical-machine-identity
  namespace: infisical-operator
type: Opaque
stringData:
  # Non-secret UUID for machine identity "k8s-operator". Required as a secretRef
  # by the InfisicalAuth schema; auth happens via the operator's SA token (TokenReview),
  # so this value grants nothing on its own. Safe to commit.
  identityId: "42c12566-1058-4674-a5f5-0cc1bc0ea4e7"