k3s/flux/apps/secrets/penpot.yaml

# Penpot runtime secrets
apiVersion: v1
kind: Secret
metadata:
  name: penpot
  namespace: apps
type: Opaque
stringData:
  api-secret-key: |-
    ${PENPOT_API_SECRET_KEY}