apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: drone-secrets
  namespace: drone
spec:
  refreshInterval: "15s"
  secretStoreRef:
    name: vault
    kind: ClusterSecretStore
  target:
    name: drone-secrets
  data:
    - secretKey: drone-rpc-secret
      remoteRef:
        key: k8s/drone
        property: drone-rpc-secret
    - secretKey: drone-server-host
      remoteRef:
        key: k8s/drone
        property: drone-server-host
    - secretKey: drone-server-proto
      remoteRef:
        key: k8s/drone
        property: drone-server-proto
    - secretKey: git-always-auth
      remoteRef:
        key: k8s/drone
        property: git-always-auth
    - secretKey: gitea-client-id
      remoteRef:
        key: k8s/drone
        property: gitea-client-id
    - secretKey: gitea-client-secret
      remoteRef:
        key: k8s/drone
        property: gitea-client-secret
    - secretKey: gitea-server
      remoteRef:
        key: k8s/drone
        property: gitea-server