{{- if .Values.externalSecret.enabled }}
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: {{ include "lions-app.name" . }}
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "lions-app.labels" . | nindent 4 }}
spec:
  refreshInterval: {{ .Values.externalSecret.refreshInterval | default "1h" }}
  secretStoreRef:
    kind: {{ .Values.externalSecret.secretStoreRef.kind }}
    name: {{ .Values.externalSecret.secretStoreRef.name }}
  target:
    name: {{ include "lions-app.secretName" . }}
    creationPolicy: {{ .Values.externalSecret.target.creationPolicy | default "Owner" }}
    deletionPolicy: {{ .Values.externalSecret.target.deletionPolicy | default "Retain" }}
  data:
    {{- range .Values.externalSecret.data }}
    - secretKey: {{ .secretKey }}
      remoteRef:
        key: {{ .remoteRef.key }}
        property: {{ .remoteRef.property }}
        {{- if .remoteRef.conversionStrategy }}
        conversionStrategy: {{ .remoteRef.conversionStrategy }}
        {{- end }}
    {{- end }}
{{- end }}