apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: plausible-geoip
  namespace: tools
spec:
  type: kv-v2

  # mount path
  mount: kvv2

  # path of the secret
  path: plausible/geoip

  # dest k8s secret
  destination:
    name: plausible-geoip
    create: true

  # static secret refresh interval
  refreshAfter: 30s

  # Name of the CRD to authenticate to Vault
  vaultAuthRef: plausible