{{- if .Values.vault.enable }}
---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: '{{ .Chart.Name }}'
  labels:
    app: '{{ .Chart.Name }}'
spec:
  refreshInterval: '60s'
  secretStoreRef:
    name: '{{ .Values.vault.secretStore }}' # имя SecretStore
    kind: SecretStore
  target:
    name: '{{ .Chart.Name }}-secrets' # имя будущего секрета kubernetes
  data:
  {{- range .Values.vault.secrets }}
    - secretKey: {{ . }}
      remoteRef:
        key: "deck/kubernetes/{{ $.Values.stand }}/{{ $.Chart.Name }}"
        property: {{ . }}
  {{- end }}
{{- end }}