# Populate Vault before first deploy:
#
#   vault kv put secret/neuron-technologies/marketing \
#     stripe_secret_key="sk_live_..." \
#     stripe_webhook_secret="whsec_..." \
#     stripe_price_professional="price_..." \
#     stripe_price_founding="price_..." \
#     next_public_stripe_publishable_key="pk_live_..."

apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: neuron-marketing-secrets
  namespace: neuron-prod
spec:
  refreshInterval: 1h
  secretStoreRef:
    name: vault
    kind: ClusterSecretStore
  target:
    name: neuron-marketing-secrets
    creationPolicy: Owner
  data:
    - secretKey: STRIPE_SECRET_KEY
      remoteRef:
        key: secret/data/neuron-technologies/marketing
        property: stripe_secret_key
    - secretKey: STRIPE_WEBHOOK_SECRET
      remoteRef:
        key: secret/data/neuron-technologies/marketing
        property: stripe_webhook_secret
    - secretKey: STRIPE_PRICE_PROFESSIONAL
      remoteRef:
        key: secret/data/neuron-technologies/marketing
        property: stripe_price_professional
    - secretKey: STRIPE_PRICE_FOUNDING
      remoteRef:
        key: secret/data/neuron-technologies/marketing
        property: stripe_price_founding
    - secretKey: NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY
      remoteRef:
        key: secret/data/neuron-technologies/marketing
        property: next_public_stripe_publishable_key