apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: runner-config
  labels:
    app.kubernetes.io/managed-by: external-secret
    app.kubernetes.io/component: runner
spec:
  secretStoreRef:
    name: aws-parameters-store
    kind: ClusterSecretStore
  target:
    name: runner-config
    template:
      metadata:
        labels:
          app.kubernetes.io/managed-by: external-secret
          app.kubernetes.io/component: runner
        annotations: {}
  data:
    - secretKey: registration_token
      remoteRef:
        key: /k3s/prod/gitea/runner/registration_token