apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: geo-service
spec:
  refreshInterval: 1h
  # The namespace's store (infra frostmoln/production/apps.tf); MAPS_API_KEY
  # lives in the Frostmoln Secret "dancefinder", next to the API's settings
  # (infra frostmoln/production/scripts/seed-app.sh).
  secretStoreRef:
    name: frostmoln
    kind: SecretStore
  target:
    name: geo-service
    template:
      engineVersion: v2
      data:
        MAPS_API_KEY: "{{ .MAPS_API_KEY }}"
  dataFrom:
  - extract:
      key: dancefinder