apiVersion: v1 kind: Secret metadata: name: the-order-secrets namespace: the-order type: Opaque stringData: # Secrets should be managed via External Secrets Operator or SOPS # This is a template - do not commit actual secrets # DATABASE_URL: "postgresql://..." # API_KEY: "..."