secrets:
  appSecretRef: op://ci/sure-app
  dbSecretRef: op://ci/sure-db
  redisSecretRef: op://ci/sure-redis

ingress:
  domain: sure.ci.local
  # clusterIssuer is strictly required (no default); the Ingress just has to
  # apply - there is no cert-manager in the CI cluster.
  clusterIssuer: ci