---
# Outpost API token, issued by authentik for the LDAP outpost and seeded into
# Vault by the terraform-authentik apply. The KV value must exist at this path
# with a `token` key before the outpost can connect.
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: authentik-ldap-outpost-token
  namespace: authentik
spec:
  destination:
    create: true
    name: authentik-ldap-outpost-token
    overwrite: true
  hmacSecretData: true
  mount: kv
  path: kubernetes/namespace/authentik/default/outpost-token
  refreshAfter: 5m
  type: kv-v2
  vaultAuthRef: default