# Bearer key for the OpenAI-compatible API server (hermes-api.renner.uno).
# Generated once in-cluster, nothing in OpenBao. Read it with
#   kubectl -n hermes get secret hermes-api-key -o jsonpath='{.data.API_SERVER_KEY}' | base64 -d
apiVersion: generators.external-secrets.io/v1alpha1
kind: Password
metadata:
  name: hermes-api-key
  namespace: hermes
spec:
  length: 64
  digits: 16
  symbols: 0
  allowRepeat: true
  noUpper: false
  secretKeys:
    - API_SERVER_KEY
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: hermes-api-key
  namespace: hermes
spec:
  refreshPolicy: CreatedOnce
  target:
    name: hermes-api-key
  dataFrom:
    - sourceRef:
        generatorRef:
          apiVersion: generators.external-secrets.io/v1alpha1
          kind: Password
          name: hermes-api-key