prod deployment

deploy/k8s/prod/secrets/sandbox-secrets.tpl.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: sandbox-secrets
+  namespace: sandbox
+  labels:
+    app.kubernetes.io/name: sandbox
+    app.kubernetes.io/component: secrets
+type: Opaque
+stringData:
+  secrets.yaml: |
+    # S3/MinIO credentials for Iceberg data access (must match minio-secret)
+    s3_access_key: "{{ op://AI Prod/MinIO/access_key }}"
+    s3_secret_key: "{{ op://AI Prod/MinIO/secret_key }}"