apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: llm-dev-konnect-auth
  namespace: llm
spec:
  refreshInterval: 1h
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault-kong-v2
  target:
    name: llm-dev-konnect-auth
    template:
      metadata:
        labels:
          konghq.com/credential: konnect
          konghq.com/secret: "true"
  data:
    - secretKey: token
      remoteRef:
        key: kong-v2/llm/dev/konnect-pat
        property: token