apiVersion: external-secrets.io/v1alpha1
kind: PushSecret
metadata:
  name: push-certificate
spec:
  refreshInterval: 1h
  updatePolicy: Replace
  deletionPolicy: None
  secretStoreRefs:
    - name: tls-origination
      kind: SecretStore
  selector:
    secret:
      name: "tls-letsencrypt"
  template:
    engineVersion: v2
    data:
      bundle: |
        {
          "fullchain": {{ index . "tls.crt" | toJson }},
          "key": {{ index . "tls.key" | toJson }}
        }
  data:
    - conversionStrategy: None
      match:
        secretKey: bundle
        remoteRef:
          remoteKey: "ssl/test.com/"