# The OnePasswordItem CR only needs a non-null item path; the actual # Kubernetes Secret comes from ci/convertx/fixtures.yaml. secrets: jwtSecretRef: op://ci/convertx-jwt ingress: domain: convertx.ci.local # clusterIssuer is strictly required (no default); the Ingress just has to # apply - there is no cert-manager in the CI cluster. clusterIssuer: ci # The chart's default is 10Gi; the install-test converts nothing, so 1Gi is # enough and provisions faster on k3d's local-path class. storage: amount: 1Gi