# Placeholder for SOPS-encrypted secrets
# Actual secrets will be encrypted with: sops --encrypt --age <admin-key>,<dev-key>
#
# Required secrets (create as test-env-secrets):
#   pg-password: password for PostgreSQL usr1cv8 user
#
# Required secrets (create as test-env-runner-token):
#   token: Gitea Actions runner registration token
#
# Example (before encryption):
#   apiVersion: v1
#   kind: Secret
#   metadata:
#     name: test-env-secrets
#     namespace: test-env
#   type: Opaque
#   stringData:
#     pg-password: "usr1cv8"
#
# For now, create secrets manually in the cluster:
#   kubectl -n test-env create secret generic test-env-secrets --from-literal=pg-password=usr1cv8
#   kubectl -n test-env create secret generic test-env-runner-token --from-literal=token=<TOKEN>