apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: registry-secret
  namespace: container-mom-system
spec:
  vaultAuthRef: vault-auth
  mount: container-mom
  type: kv-v2
  path: registry/ghcr
  destination:
    name: container-mom-registry
    create: true
  refreshAfter: 1h
  templateData: |
    {
      "type": "kubernetes.io/dockerconfigjson",
      "data": {
        ".dockerconfigjson": "{{ .config }}"
      }
    }