# Populate Vault before first deploy:
#
#   vault kv put secret/neuron-technologies/daemon \
#     anthropic_api_key="sk-ant-..."

apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: neuron-daemon-secrets
  namespace: neuron-prod
spec:
  refreshInterval: 1h
  secretStoreRef:
    name: vault
    kind: ClusterSecretStore
  target:
    name: neuron-daemon-secrets
    creationPolicy: Owner
  data:
    - secretKey: ANTHROPIC_API_KEY
      remoteRef:
        key: secret/data/neuron-technologies/daemon
        property: anthropic_api_key