apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: drone-secrets
  namespace: drone
spec:
  refreshInterval: "15s"
  secretStoreRef:
    name: vault
    kind: ClusterSecretStore
  target:
    name: drone-secrets
  data:
    - secretKey: DRONE_RPC_SECRET
      remoteRef:
        key: k8s/drone
        property: drone-rpc-secret
    - secretKey: DRONE_SERVER_HOST
      remoteRef:
        key: k8s/drone
        property: drone-server-host
    - secretKey: DRONE_SERVER_PROTO
      remoteRef:
        key: k8s/drone
        property: drone-server-proto
    - secretKey: DRONE_GIT_ALWAYS_AUTH
      remoteRef:
        key: k8s/drone
        property: git-always-auth
    - secretKey: DRONE_GITEA_CLIENT_ID
      remoteRef:
        key: k8s/drone
        property: gitea-client-id
    - secretKey: DRONE_GITEA_CLIENT_SECRET
      remoteRef:
        key: k8s/drone
        property: gitea-client-secret
    - secretKey: DRONE_GITEA_SERVER
      remoteRef:
        key: k8s/drone
        property: gitea-server
    - secretKey: DRONE_DATABASE_DRIVER
      remoteRef:
        key: k8s/drone
        property: drone-db-driver
    - secretKey: DRONE_DATABASE_DATASOURCE
      remoteRef:
        key: k8s/drone
        property: drone-db-url