---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultAuth
metadata:
  name: default
  namespace: dragonfly
spec:
  method: kubernetes
  mount: kubernetes
  kubernetes:
    role: dragonfly
    serviceAccount: dragonfly-vso
  vaultConnectionRef: vault/vault
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: quay-acl
  namespace: dragonfly
spec:
  type: kv-v2
  mount: secret
  path: dragonfly/quay/acl
  destination:
    name: quay-acl
    create: true
  refreshAfter: 1h
  vaultAuthRef: default
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: forgejo-acl
  namespace: dragonfly
spec:
  type: kv-v2
  mount: secret
  path: dragonfly/forgejo/acl
  destination:
    name: forgejo-acl
    create: true
  vaultAuthRef: default
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: forgejo-public-acl
  namespace: dragonfly
spec:
  type: kv-v2
  mount: secret
  path: dragonfly/forgejo-public/acl
  destination:
    name: forgejo-public-acl
    create: true
  vaultAuthRef: default
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: stalwart-acl
  namespace: dragonfly
spec:
  type: kv-v2
  mount: secret
  path: dragonfly/stalwart/acl
  destination:
    name: stalwart-acl
    create: true
  refreshAfter: 1h
  vaultAuthRef: default