resource "kubernetes_namespace" "dev" {
  metadata {
    name = "dev"
  }
}

resource "kubernetes_manifest" "random_secret_sync" {
  manifest = {
    apiVersion = "external-secrets.io/v1"
    kind       = "ExternalSecret"
    metadata = {
      name      = "random-secret-sync"
      namespace = kubernetes_namespace.dev.metadata.0.name
    }
    spec = {
      refreshInterval = "30s"
      secretStoreRef = {
        name = "stackit-secrets-store"
        kind = "ClusterSecretStore"
      }
      target = {
        name           = "random-secret-sync"
        creationPolicy = "Owner"
      }
      data = [
        {
          secretKey = "admin"
          remoteRef = {
            key    = "random-secret"
            property = "admin"
          }
        }
      ]
    }
  }
  depends_on = [helm_release.external_secrets_operator_chart]
}