# This is a place holder for adding kubernetes external secrets, please add the
# ExternalSecret CR here, separated by `---`.
---
apiVersion: kubernetes-client.io/v1
kind: ExternalSecret
metadata:
  name: service-account             # The name of the Kubernetes Secret
  namespace: test-pods
spec:
  backendType: gcpSecretsManager
  projectId: k8s-infra-prow-build
  data:
  - key: prow-build-service-account # The name of the GSM Secret
    name: service-account.json      # The key to write to in the Kubernetes Secret
    version: latest                 # The version of the GSM Secret
---
apiVersion: kubernetes-client.io/v1
kind: ExternalSecret
metadata:
  name: ssh-key-secret                          # The name of the Kubernetes Secret
  namespace: test-pods
spec:
  backendType: gcpSecretsManager
  projectId: k8s-infra-prow-build
  data:
  - key: prow-build-ssh-key-secret-ssh-public   # The name of the GSM Secret
    name: ssh-public                            # The key to write to in the Kubernetes Secret
    version: latest                             # The version of the GSM Secret
  - key: prow-build-ssh-key-secret-ssh-private  # The name of the GSM Secret
    name: ssh-private                           # The key to write to in the Kubernetes Secret
    version: latest                             # The version of the GSM Secret
---
apiVersion: kubernetes-client.io/v1
kind: ExternalSecret
metadata:
  name: aws-credentials-768319786644           # The name of the Kubernetes Secret
  namespace: test-pods
spec:
  backendType: gcpSecretsManager
  projectId: k8s-infra-prow-build
  data:
  - key: gke_k8s-prow-builds_us-central1-f_prow__test-pods__aws-credentials-768319786644   # The name of the GSM Secret
    name: credentials                                                                      # The key to write to in the Kubernetes Secret
    version: latest                                                                        # The version of the GSM Secret
    property: credentials
---
apiVersion: kubernetes-client.io/v1
kind: ExternalSecret
metadata:
  name: aws-ssh-key-secret           # The name of the Kubernetes Secret
  namespace: test-pods
spec:
  backendType: gcpSecretsManager
  projectId: k8s-infra-prow-build
  data:
  - key: gke_k8s-prow-builds_us-central1-f_prow__test-pods__aws-ssh-key-secret   # The name of the GSM Secret
    name: aws-ssh-private                                                        # The key to write to in the Kubernetes Secret
    version: latest                                                              # The version of the GSM Secret
    property: aws-ssh-private
  - key: gke_k8s-prow-builds_us-central1-f_prow__test-pods__aws-ssh-key-secret   # The name of the GSM Secret
    name: aws-ssh-public                                                         # The key to write to in the Kubernetes Secret
    version: latest                                                              # The version of the GSM Secret
    property: aws-ssh-public
---
apiVersion: kubernetes-client.io/v1
kind: ExternalSecret
metadata:
  name: k8s-cip-test-prod-service-account
  namespace: test-pods
spec:
  backendType: gcpSecretsManager
  projectId: k8s-infra-prow-build
  data:
  - key: k8s-cip-test-prod-service-account
    name: service-account.json
    version: latest
---
apiVersion: kubernetes-client.io/v1
kind: ExternalSecret
metadata:
  name: k8s-gcr-audit-test-prod-service-account
  namespace: test-pods
spec:
  backendType: gcpSecretsManager
  projectId: k8s-infra-prow-build
  data:
  - key: k8s-gcr-audit-test-prod-service-account
    name: service-account.json
    version: latest
---
apiVersion: kubernetes-client.io/v1
kind: ExternalSecret
metadata:
  name: nfd-creds            # The name of the Kubernetes Secret
  namespace: test-pods
spec:
  backendType: gcpSecretsManager
  projectId: k8s-infra-prow-build
  data:
  - key: nfd-codecov-token  # The name of the GSM Secret
    name: codecov-token     # The key to write to in the Kubernetes Secret
    version: latest         # The version of the GSM Secret
---
apiVersion: kubernetes-client.io/v1
kind: ExternalSecret
metadata:
  name: spaces-digitalocean-s3
  namespace: test-pods
spec:
  backendType: gcpSecretsManager
  projectId: k8s-infra-prow-build
  dataFrom:
  - spaces-digitalocean-s3
---
apiVersion: kubernetes-client.io/v1
kind: ExternalSecret
metadata:
  name: cluster-api-provider-digitalocean-token
  namespace: test-pods
spec:
  backendType: gcpSecretsManager
  projectId: k8s-infra-prow-build
  dataFrom:
   - cluster-api-provider-digitalocean-token
---
apiVersion: kubernetes-client.io/v1
kind: ExternalSecret
metadata:
  name: kops-e2e-do-ssh-key
  namespace: test-pods
spec:
  backendType: gcpSecretsManager
  projectId: k8s-infra-prow-build
  dataFrom:
   - kops-e2e-do-ssh-key