apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
    name: global-secrets-ext
    labels:
        {{- include "..labels" . | nindent 8 }}
spec:
  refreshInterval: 4h
  secretStoreRef:
    kind: ClusterSecretStore
    name: az-cluster-store
  target:
    name: global-secrets
    creationPolicy: Owner
  data:
    - secretKey: COMPOSER_AUTH
      remoteRef:
        key: secret/GITLAB-COMPOSER-AUTH
    - secretKey: SMTP_USER
      remoteRef:
        key: secret/SMTP-USER
    - secretKey: SMTP_PASS
      remoteRef:
        key: secret/SMTP-PASSWORD
    - secretKey: SMTP_HOST
      remoteRef:
        key: secret/SMTP-HOST
---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: pull-secret-ext
  labels:
    {{- include "..labels" . | nindent 8 }}
spec:
  refreshInterval: 4h
  secretStoreRef:
    kind: ClusterSecretStore
    name: az-cluster-store
  target:
    name: pull-secret
    template:
      type: kubernetes.io/dockerconfigjson
      data:
        .dockerconfigjson: "{{`{{ .dockerconfig | toString }}`}}"
    creationPolicy: Owner
  data:
    - secretKey: dockerconfig
      remoteRef:
        key: secret/CLDY-CR-PULL-TOKEN