---
apiVersion: v1
kind: Namespace
metadata:
  name: external-secrets
---
# https://external-secrets.io/latest/api/secretstore/
apiVersion: external-secrets.io/v1
kind: SecretStore
metadata:
  name: aws-parameterstore
  namespace: external-secrets
spec:
  provider:
    aws:
      service: ParameterStore
      region: eu-west-1
---
# https://external-secrets.io/latest/api/generator/password/
apiVersion: generators.external-secrets.io/v1alpha1
kind: Password
metadata:
  name: my-password
  namespace: external-secrets
spec:
  length: 12
  digits: 5
  symbols: 5
  symbolCharacters: "-_"
  noUpper: false
  allowRepeat: true
---
# https://external-secrets.io/latest/api/pushsecret/
apiVersion: external-secrets.io/v1alpha1
kind: PushSecret
metadata:
  name: pushsecret-example
  namespace: external-secrets
  labels:
    issue-number: "issue-4701"
spec:
  deletionPolicy: Delete
  refreshInterval: 1m
  secretStoreRefs:
    - name: aws-parameterstore
      kind: SecretStore
  selector:
    generatorRef:
      apiVersion: generators.external-secrets.io/v1alpha1
      kind: Password
      name: my-password
  data:
    - match:
        remoteRef:
          remoteKey: my-parameter-01
      metadata:
        apiVersion: kubernetes.external-secrets.io/v1alpha1
        kind: PushSecretMetadata
        spec:
          tags:
            secret-store: aws-parameterstore
            refresh-interval: 2m
            description: "This is a test parameter pushed from Kubernetes"