apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  labels:
    app: oncall
    app.kubernetes.io/instance: oncall
  name: oncall-secret
spec:
  data:
    - remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: aisupport-prod/oncall
        metadataPolicy: None
        property: FEISHU_APP_ID
      secretKey: FEISHU_APP_ID
    - remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: aisupport-prod/oncall
        metadataPolicy: None
        property: FEISHU_APP_SECRET
      secretKey: FEISHU_APP_SECRET
    - remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: aisupport-prod/oncall
        metadataPolicy: None
        property: ONCALL_DB_DSN
      secretKey: ONCALL_DB_DSN
    - remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: aisupport-prod/oncall
        metadataPolicy: None
        property: ALI_ACCESS_KEY_SECRET
      secretKey: ALI_ACCESS_KEY_SECRET
    - remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: aisupport-prod/oncall
        metadataPolicy: None
        property: TWILIO_AUTH_TOKEN
      secretKey: TWILIO_AUTH_TOKEN
  refreshInterval: 1h
  secretStoreRef:
    kind: ClusterSecretStore
    name: default
  target:
    creationPolicy: Owner
    deletionPolicy: Retain
    name: oncall-secret
