apiVersion: <http://external-secrets.io/v1beta1|external-secrets.io/v1beta1>
kind: ExternalSecret
metadata:
  name: atlantis-github-config
spec:
  secretStoreRef:
    name: secrets
    kind: ClusterSecretStore
  target:
    deletionPolicy: "Retain"
    template:
      engineVersion: v2
      type: Opaque
      data:
        ATLANTIS_GH_APP_KEY: '{{ .ghe_app_key }}'
        ATLANTIS_GH_WEBHOOK_SECRET: '{{ .ghe_webhook_secret }}'
        ATLANTIS_GH_TOKEN: '{{ .ghe_token }}'
  data:
    - secretKey: ghe_webhook_secret
      remoteRef:
        key: atlantis
        property: ghe_webhook_secret
    - secretKey: ghe_app_key
      remoteRef:
        key: atlantis
        property: ghe_app_key
    - secretKey: ghe_token
      remoteRef:
        key: atlantis
        property: ghe_token