kubernetes/k8s-peterg/renovate-operator/secrets.yaml

---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: renovate-operator-secrets
  namespace: renovate-operator
spec:
  refreshInterval: "15s"
  secretStoreRef:
    name: vault-wheatley
    kind: ClusterSecretStore
  target:
    name: renovate-operator-secrets
  data:
    - secretKey: RENOVATE_TOKEN
      remoteRef:
        key: /secrets/managed/renovate/token
        property: RENOVATE_TOKEN
    - secretKey: RENOVATE_GITHUB_TOKEN
      remoteRef:
        key: /secrets/managed/renovate/token
        property: GITHUB_COM_TOKEN
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: renovate-operator-docker-login
  namespace: renovate-operator
spec:
  refreshInterval: "15s"
  secretStoreRef:
    name: vault-wheatley
    kind: ClusterSecretStore
  target:
    name: renovate-operator-docker-login
  data:
    - secretKey: DOCKER_USERNAME
      remoteRef:
        key: /secrets/managed/renovate/docker
        property: DOCKER_USERNAME
    - secretKey: DOCKER_TOKEN
      remoteRef:
        key: /secrets/managed/renovate/docker
        property: DOCKER_PASSWORD