apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: gitea-runner-token
  namespace: gitea
spec:
  type: kv-v2
  mount: kv
  path: gitea/gitea-runner-token
  destination:
    name: gitea-runner-token
    create: true
  refreshAfter: 30s
  vaultAuthRef: vault-auth