apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMServiceAccountKey metadata: name: external-secrets-gcp-api-key spec: serviceAccountRef: name: placeholder --- apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMServiceAccountKey metadata: name: gcp-creds spec: serviceAccountRef: name: placeholder --- apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1 kind: SecretManagerSecret metadata: name: external-secrets-${cluster_uuid}-gcp-api-key spec: replication: automatic: true --- apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1 kind: SecretManagerSecretVersion metadata: name: external-secrets-${cluster_uuid}-gcp-api-key spec: secretRef: name: external-secrets-${cluster_uuid}-gcp-api-key enabled: false secretData: valueFrom: secretKeyRef: name: external-secrets-gcp-api-key key: key.json --- apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1 kind: SecretManagerSecretVersion metadata: name: external-secrets-${cluster_uuid}-gcp-api-key-2 spec: secretRef: name: external-secrets-${cluster_uuid}-gcp-api-key enabled: true secretData: valueFrom: secretKeyRef: name: gcp-creds key: key.json