{{- if .Values.secret.externalSecret.enabled }}
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: {{ include "rclone.sourceSecretName" . }}
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "secretRclone.labels" . | nindent 4 }}
    app.kubernetes.io/name: {{ include "rclone.sourceSecretName" . }}
    {{- with .Values.additionalLabels }}
    {{- toYaml . | nindent 4 }}
    {{- end }}
spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: {{ .Values.secret.externalSecret.storeName | required "External Secret store name is required" }}
  data:
    - secretKey: {{ include "secretRclone.envAccessKey" . }}
      remoteRef:
        key: {{ .Values.secret.externalSecret.source.credentials.path }}
        property: {{ .Values.secret.externalSecret.source.credentials.keyIdProperty }}
    - secretKey: {{ include "secretRclone.envSecretKey" . }}
      remoteRef:
        key: {{ .Values.secret.externalSecret.source.credentials.path }}
        property: {{ .Values.secret.externalSecret.source.credentials.secretKeyProperty }}
    - secretKey: {{ include "secretRclone.envRegion" . }}
      remoteRef:
        key: {{ .Values.secret.externalSecret.source.credentials.path }}
        property: {{ .Values.secret.externalSecret.source.credentials.regionProperty }}
    - secretKey: {{ include "secretRclone.envSrcEndpoint" . }}
      remoteRef:
        key: {{ .Values.secret.externalSecret.source.config.path }}
        property: {{ .Values.secret.externalSecret.source.config.endpointProperty }}

---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: {{ include "rclone.destinationSecretName" . }}
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "secretRclone.labels" . | nindent 4 }}
    app.kubernetes.io/name: {{ include "rclone.destinationSecretName" . }}
    {{- with .Values.additionalLabels }}
    {{- toYaml . | nindent 4 }}
    {{- end }}
spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: {{ .Values.secret.externalSecret.storeName | required "External Secret store name is required" }}
  data:
    - secretKey: {{ include "secretRclone.envAccessKey" . }}
      remoteRef:
        key: {{ .Values.secret.externalSecret.destination.credentials.path }}
        property: {{ .Values.secret.externalSecret.destination.credentials.keyIdProperty }}
    - secretKey: {{ include "secretRclone.envSecretKey" . }}
      remoteRef:
        key: {{ .Values.secret.externalSecret.destination.credentials.path }}
        property: {{ .Values.secret.externalSecret.destination.credentials.secretKeyProperty }}
    - secretKey: {{ include "secretRclone.envRegion" . }}
      remoteRef:
        key: {{ .Values.secret.externalSecret.destination.credentials.path }}
        property: {{ .Values.secret.externalSecret.destination.credentials.regionProperty }}
    - secretKey: {{ include "secretRclone.envDestEndpoint" . }}
      remoteRef:
        key: {{ .Values.secret.externalSecret.destination.config.path }}
        property: {{ .Values.secret.externalSecret.destination.config.endpointProperty }}
{{- end }}