{{- if not .Values.auth.existingSecret }}
apiVersion: v1
kind: Secret
metadata:
  name: {{ include "shoal.secretName" . }}
  labels:
    {{- include "shoal.labels" . | nindent 4 }}
type: Opaque
stringData:
  SHOAL_ROOT_API_KEY: {{ required "auth.rootApiKey (or auth.existingSecret) is required" .Values.auth.rootApiKey | quote }}
  {{- if .Values.auth.awsAccessKeyId }}
  AWS_ACCESS_KEY_ID: {{ .Values.auth.awsAccessKeyId | quote }}
  {{- end }}
  {{- if .Values.auth.awsSecretAccessKey }}
  AWS_SECRET_ACCESS_KEY: {{ .Values.auth.awsSecretAccessKey | quote }}
  {{- end }}
{{- end }}