---
apiVersion: external-secrets.io/v1beta1
kind: ClusterExternalSecret
metadata:
  name: sops-age
spec:
  externalSecretName: sops-age

  namespaceSelectors:
    - matchLabels:
        external-secrets.io/secrets.sops-age: require
    - matchLabels:
        app.kubernetes.io/instance: flux-system

  externalSecretSpec:
    secretStoreRef:
      kind: ClusterSecretStore
      name: infisical

    target:
      name: sops-age

    data:
      - secretKey: age.agekey
        remoteRef:
          key: sops-age-key