# Pods get secrets as environment variables
secretRef:
  name: llm-trace-langfuse-db  # ← Created by external-secret