---
# gitea-runner-secret — neural-platform org runner token
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: gitea-runner-secret
  namespace: ci
  annotations:
    force-sync: "2026-04-23"
spec:
  refreshInterval: 1h
  secretStoreRef:
    name: vault
    kind: ClusterSecretStore
  target:
    name: gitea-runner-secret
    creationPolicy: Owner
    template:
      data:
        GITEA_INSTANCE_URL: "http://192.168.8.148:30322"
        GITEA_RUNNER_REGISTRATION_TOKEN: "{{ .runner_token }}"
  data:
    - secretKey: runner_token
      remoteRef:
        key: secret/data/gitea
        property: runner_token
---
# neuron-technologies-runner-secret — neuron-technologies org runner token
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: neuron-technologies-runner-secret
  namespace: ci
spec:
  refreshInterval: 1h
  secretStoreRef:
    name: vault
    kind: ClusterSecretStore
  target:
    name: neuron-technologies-runner-secret
    creationPolicy: Owner
    template:
      data:
        GITEA_INSTANCE_URL: "http://192.168.8.148:30322"
        GITEA_RUNNER_REGISTRATION_TOKEN: "{{ .runner_token }}"
  data:
    - secretKey: runner_token
      remoteRef:
        key: secret/data/gitea
        property: neuron_technologies_runner_token