apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: scaleway-registry-secret
  namespace: eveai-staging
spec:
  refreshInterval: 1h
  secretStoreRef:
    name: scaleway-cluster-secret-store
    kind: ClusterSecretStore
  target:
    name: scaleway-registry-cred
    creationPolicy: Owner
    template:
      type: kubernetes.io/dockerconfigjson
      data:
        .dockerconfigjson: |
          {"auths":{ "{{ .SCW_REGISTRY_URL }}": { 
            "username":"{{ .SCW_REGISTRY_ACCESS_KEY }}",
            "password":"{{ .SCW_REGISTRY_SECRET_KEY }}",
            "auth":"{{ printf "%s:%s" .SCW_REGISTRY_ACCESS_KEY .SCW_REGISTRY_SECRET_KEY | b64enc }}"
          }}}
  data:
  - secretKey: SCW_REGISTRY_URL
    remoteRef:
      key: name:eveai-registry
      property: SCW_REGISTRY_URL
  - secretKey: SCW_REGISTRY_ACCESS_KEY
    remoteRef:
      key: name:eveai-registry
      property: SCW_REGISTRY_ACCESS_KEY
  - secretKey: SCW_REGISTRY_SECRET_KEY
    remoteRef:
      key: name:eveai-registry
      property: SCW_REGISTRY_SECRET_KEY