---
# Credentials for polling the git.unkin.net container registry.
# Vault KV path: kv/service/argocd-image-updater/registry-creds
# Required key: creds — value format: "<username>:<token>"
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: registry-creds
  namespace: argocd-image-updater
spec:
  destination:
    create: true
    name: registry-creds
    overwrite: true
  hmacSecretData: true
  mount: kv
  path: service/argocd-image-updater/registry-creds
  refreshAfter: 5m
  type: kv-v2
  vaultAuthRef: default
---
# ArgoCD API token for image updater to discover and update Applications.
# Vault KV path: kv/service/argocd-image-updater/argocd-token
# Required key: token — generate via: argocd account generate-token --account image-updater
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: argocd-token
  namespace: argocd-image-updater
spec:
  destination:
    create: true
    name: argocd-token
    overwrite: true
  hmacSecretData: true
  mount: kv
  path: service/argocd-image-updater/argocd-token
  refreshAfter: 5m
  type: kv-v2
  vaultAuthRef: default