secrets:
# Compact form: name and secret separated by the first colon.
# Use this for simple string values that do not contain colons.
- prod/api/key:sk-abc123xyz
# Expanded form: explicit name/secret keys.
# Use this when the secret value contains colons (JSON, URLs, etc.).
- name: prod/db/password
secret: '{"user":"admin","pass":"s3cr3t"}'
- name: prod/oauth/client-secret
secret: oauth2://client_id:client_secret@auth.example.com