apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: ${NAME}-tls
  namespace: ${NAMESPACE}
spec:
  refreshInterval: 1h
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault-kong-v2
  target:
    name: ${NAME}-tls
    template:
      type: kubernetes.io/tls
      metadata:
        labels:
          konghq.com/secret: "true"
  data:
    - secretKey: tls.crt
      remoteRef:
        key: kong-v2/shared/tls/sttlab-local
        property: tls.crt
    - secretKey: tls.key
      remoteRef:
        key: kong-v2/shared/tls/sttlab-local
        property: tls.key