apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: theorchard-stripo
  namespace: argocd
  labels:
    argocd.argoproj.io/secret-type: repository
spec:
  refreshInterval: 1m
  secretStoreRef:
    name: aws-secretsmanager
    kind: ClusterSecretStore
  target:
    name: theorchard-stripo
    creationPolicy: Owner
    deletionPolicy: Retain
    template:
      engineVersion: v2
      mergePolicy: Replace
      metadata:
        labels:
          argocd.argoproj.io/secret-type: repository
      data:
        type: git
        url: git@github.com:theorchard/stripo.git
        sshPrivateKey: "{{ "{{" }} .sshPrivateKey {{ "}}" }}"
  data:
  - secretKey: sshPrivateKey
    remoteRef:
      key: {{ .Values.global.environment }}/{{ .Values.global.serviceName }}-argocd/STRIPO_ARGO_DEPLOYMENT_KEY
      conversionStrategy: Default
      decodingStrategy: None
      metadataPolicy: None