# eveai-external-secrets.yaml
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: eveai-external-secrets
  namespace: eveai-staging
spec:
  refreshInterval: 300s
  secretStoreRef:
    name: scaleway-cluster-secret-store
    kind: ClusterSecretStore
  target:
    name: eveai-secrets
    creationPolicy: Owner
  dataFrom:
  # Alle keys uit eveai-postgresql secret
  - extract:
      key: name:eveai-postgresql
  # Alle keys uit eveai-redis secret
  - extract:
      key: name:eveai-redis
  # Alle keys uit eveai-openai secret
  - extract:
      key: name:eveai-openai
  # Alle keys uit eveai-mistral secret
  - extract:
      key: name:eveai-mistral
  # Alle keys uit eveai-app-keys secret
  - extract:
      key: name:eveai-app-keys
  # Alle keys uit eveai-object-storage secret
  - extract:
      key: name:eveai-object-storage
  # Alle keys uit eveai-tem secret
  - extract:
      key: name:eveai-tem
  data:
    # Certificaat als aparte data entry
    - secretKey: REDIS_CERT
      remoteRef:
        key: name:eveai-redis-certificate
    - secretKey: PGSQL_CERT
      remoteRef:
        key: name:eveai-postgresql-certificate