apiVersion: v1
kind: Secret
metadata:
  name: cloud-storage-secret
  namespace: {{ .Release.Namespace }}
type: Opaque
stringData:
  rclone.conf: |
    [s3]
    type = s3
    provider = AWS
    env_auth = false
    access_key_id = <my-access-key>
    secret_access_key = <my-secret-key>
    region = us-east-1

    [ceph]
    type = s3
    provider = Ceph
    env_auth = false
    access_key_id = <my-access-key>
    secret_access_key = <my-secret-key>
    endpoint = <ceph-object-store-endpoint>
    region = :default-placement

    [gcs]
    type = google cloud storage
    # The service account must include Storage Object Viewer role
    # The content can be retrieved by `cat <service-account-file.json> | jq -c .`
    service_account_credentials = <service-account-json-file-content>