apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: llm-connect-provider-secrets
  namespace: activity-core
  labels:
    app.kubernetes.io/name: llm-connect
    app.kubernetes.io/part-of: railiance-gitops
spec:
  refreshInterval: 1h
  secretStoreRef:
    kind: ClusterSecretStore
    name: openbao-activity-core
  target:
    name: llm-connect-provider-secrets
    creationPolicy: Owner
  data:
    - secretKey: OPENROUTER_API_KEY
      remoteRef:
        key: platform/workloads/activity-core/llm-connect/llm-connect-provider-secrets
        property: OPENROUTER_API_KEY