apiVersion: iam.cnrm.cloud.google.com/v1beta1
kind: IAMServiceAccountKey
metadata:
  name: external-secrets-gcp-api-key
spec:
  serviceAccountRef:
    name: placeholder
---
apiVersion: iam.cnrm.cloud.google.com/v1beta1
kind: IAMServiceAccountKey
metadata:
  name: gcp-creds
spec:
  serviceAccountRef:
    name: placeholder
---
apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
kind: SecretManagerSecret
metadata:
  name: external-secrets-${cluster_uuid}-gcp-api-key
spec:
  replication:
    automatic: true
---
apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
kind: SecretManagerSecretVersion
metadata:
  name: external-secrets-${cluster_uuid}-gcp-api-key
spec:
  secretRef:
    name: external-secrets-${cluster_uuid}-gcp-api-key
  enabled: false
  secretData:
    valueFrom:
      secretKeyRef:
        name: external-secrets-gcp-api-key
        key: key.json
---
apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
kind: SecretManagerSecretVersion
metadata:
  name: external-secrets-${cluster_uuid}-gcp-api-key-2
spec:
  secretRef:
    name: external-secrets-${cluster_uuid}-gcp-api-key
  enabled: true
  secretData:
    valueFrom:
      secretKeyRef:
        name: gcp-creds
        key: key.json