resource "kubectl_manifest" "prj_secret" {
  ignore_fields = ["metadata.annotations"]
  yaml_body  = <<-EOF
    apiVersion: "secretgenerator.mittwald.de/v1alpha1"
    kind: "StringSecret"
    metadata:
      name: "nextcloud"
      namespace: "${var.namespace}"
      labels: ${jsonencode(local.common-labels)}
    spec:
      forceRegenerate: false
      data:
        nextcloud-username: "${var.admin.name}"
      fields:
      - fieldName: "nextcloud-password"
        length: "32"
      - fieldName: "nextcloud-token"
        length: "32"
  EOF
}