{{- if not .Values.externalSecret.enabled }}
{{- if .Values.ovhCredentials.applicationKey }}
---
# Secret OVH credentials pour cert-manager-webhook-ovh-ops
apiVersion: v1
kind: Secret
metadata:
  name: {{ .Values.externalSecret.secretName | default "cert-manager-webhook-ovh" }}
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/name: cert-manager-webhook-ovh
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/managed-by: {{ .Release.Service }}
type: Opaque
stringData:
  application-key: {{ .Values.ovhCredentials.applicationKey }}
  application-secret: {{ .Values.ovhCredentials.applicationSecret }}
  consumer-key: {{ .Values.ovhCredentials.consumerKey }}
---
# Secret OVH credentials pour cert-manager-ops (partage du même secret)
apiVersion: v1
kind: Secret
metadata:
  name: {{ .Values.externalSecret.secretName | default "cert-manager-webhook-ovh" }}
  namespace: {{ .Values.cert-manager-webhook-ovh.certManager.namespace | default "cert-manager-ops" }}
  labels:
    app.kubernetes.io/name: cert-manager-webhook-ovh
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/managed-by: {{ .Release.Service }}
type: Opaque
stringData:
  application-key: {{ .Values.ovhCredentials.applicationKey }}
  application-secret: {{ .Values.ovhCredentials.applicationSecret }}
  consumer-key: {{ .Values.ovhCredentials.consumerKey }}
{{- end }}
{{- end }}