{{- $host := .Values.registry.host }}
{{- $user := .Values.registry.user }}
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: forgejo-registry
  namespace: repertory-api
  annotations:
    argocd.argoproj.io/sync-wave: "-1"
spec:
  refreshInterval: 1h
  secretStoreRef:
    name: aws-secrets-manager
    kind: ClusterSecretStore
  target:
    name: forgejo-registry
    template:
      engineVersion: v2
      mergePolicy: Replace
      type: kubernetes.io/dockerconfigjson
      data:
        .dockerconfigjson: '{"auths":{"{{ $host }}":{"username":"{{ $user }}","password":"{{ "{{" }} .registry_token {{ "}}" }}","auth":"{{ "{{" }} printf "{{ $user }}:%s" .registry_token | b64enc {{ "}}" }}"}}}'
  data:
    - secretKey: registry_token
      remoteRef:
        key: dumpnet
        property: forgejo.registry_token