apiVersion: v1
kind: Secret
metadata:
  name: bybit-testnet-credentials
  namespace: foxhunt
  labels:
    app.kubernetes.io/part-of: foxhunt
type: Opaque
stringData:
  # TEMPLATE ONLY — placeholder values. NEVER commit real Bybit API keys.
  # Populate out-of-band (e.g. from Scaleway Secret Manager) with:
  #   kubectl create secret generic bybit-testnet-credentials -n foxhunt \
  #     --from-literal=api-key=<TESTNET_API_KEY> \
  #     --from-literal=api-secret=<TESTNET_API_SECRET>
  # The dagster deployment reads these as FXHNT_BYBIT_EXEC_API_KEY /
  # FXHNT_BYBIT_EXEC_API_SECRET (BybitExecutionConfig, env_prefix FXHNT_BYBIT_EXEC_).
  # Testnet only: BybitExecution.set_sandbox_mode(testnet=true) is the default.
  api-key: "REPLACE_FROM_SCW_SECRET"
  api-secret: "REPLACE_FROM_SCW_SECRET"
