The Alfresco content repository Docker image comes with a pre-created default keystore that contains a secret key. For more information, see Manage Alfresco keystores and Dockerfile.
It is recommended to generate a new keystore in production systems. You can mount it to the content-repository docker image to location /usr/local/tomcat/shared/classes/alfresco/keystore/. If the standard names of the keystore and the key are used, you only need to change the password values in values.yaml:
metadataKeystore: keystorePassword: "" keyPassword: ""
Otherwise, refer to the full list of configuration options in Authorization.