secrets:
  databaseSecretRef: op://ci/uv-db
  oidcSecretRef: op://ci/uv-oidc

ingress:
  domain: uv.ci.local
  # clusterIssuer is strictly required (no default); the Ingress just has to
  # apply - there is no cert-manager in the CI cluster.
  clusterIssuer: ci