apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: renovate-env
  namespace: renovate
spec:
  type: kv-v2
  mount: kv
  path: renovate/renovate-env
  destination:
    name: renovate-env
    create: true
    type: Opaque
    labels:
      allowedToBeCloned: "true"
  refreshAfter: 30s
  vaultAuthRef: vault-auth