apiVersion: v1
kind: Secret
metadata:
  name: sandbox-secrets
  namespace: sandbox
  labels:
    app.kubernetes.io/name: sandbox
    app.kubernetes.io/component: secrets
type: Opaque
stringData:
  secrets.yaml: |
    # S3/MinIO credentials for Iceberg data access (must match minio-secret)
    s3_access_key: "{{ op://AI Prod/MinIO/access_key }}"
    s3_secret_key: "{{ op://AI Prod/MinIO/secret_key }}"