{{- if and .Values.externalSecrets }} {{- range .Values.externalSecrets }} --- apiVersion: v1 kind: ExternalSecret metadata: name: {{ include "..fullname" $ }}-{{ .name }} labels: {{- include "..labels" $ | nindent 4 }} spec: refreshInterval: {{ .refreshInterval | default "10h" }} secretStoreRef: {{- if .ref.clusterSecretStore }} kind: ClusterSecretStore name: {{ .ref.clusterSecretStore }} {{- else }} kind: SecretStore name: {{ .ref.secretStore }} namespace: {{ .ref.secretStoreNamespace }} {{- end }} target: name: {{ include "..fullname" $ }}-exts-{{ .name }} template: {{- if eq .type "docker"}} type: kubernetes.io/dockerconfigjson {{- end }} metadata: labels: app.kubernetes.io/managed-by: External-Secrets data: {{- range $v := .items }} - secretKey: {{ $v.target }} remoteRef: key: {{ $v.source }} {{- end }} {{- end }} {{- end }}