{{- if and .Values.pipeline.enabled .Values.infisical.enabled }}
apiVersion: infisical.com/v1alpha1
kind: InfisicalSecret
metadata:
  name: amp-security-pipeline-secrets
spec:
  secretName: amp-security-pipeline-secrets
  target:
    creationPolicy: Owner
  workspaceSlug: {{ .Values.infisical.workspaceSlug | quote }}
  projectSlug: {{ .Values.infisical.projectSlug | quote }}
  secrets:
    - secretKey: SOCKET_DEV_API_KEY
      remoteRef:
        key: SOCKET_DEV_API_KEY
    - secretKey: PULUMI_ACCESS_TOKEN
      remoteRef:
        key: PULUMI_ACCESS_TOKEN
    - secretKey: S3_ACCESS_KEY_ID
      remoteRef:
        key: S3_ACCESS_KEY_ID
    - secretKey: S3_SECRET_ACCESS_KEY
      remoteRef:
        key: S3_SECRET_ACCESS_KEY
    - secretKey: DEFECTDOJO_URL
      remoteRef:
        key: DEFECTDOJO_URL
    - secretKey: DEFECTDOJO_API_TOKEN
      remoteRef:
        key: DEFECTDOJO_API_TOKEN
{{- end }}