locals {
  secret-labels = merge(local.common_labels, {
    "k8up.io/backup" = "true"
  })
}

resource "kubectl_manifest" "gitea_secret" {
  ignore_fields = ["metadata.annotations"]
  yaml_body  = <<-EOF
    apiVersion: "secretgenerator.mittwald.de/v1alpha1"
    kind: "StringSecret"
    metadata:
      name: "gitea-admin-user"
      namespace: "${var.namespace}"
      labels: ${jsonencode(local.secret-labels)}
    spec:
      forceRegenerate: false
      data:
        username: "${var.admin.name}"
      fields:
      - fieldName: "password"
        length: "32"
  EOF
}