---
apiVersion: v1
kind: Secret
metadata:
  name: "{{ item.dns_provider }}-api-key"
type: Opaque
data:
{% if item.dns_provider == "cloudflare" %}
  api-key: "{{ item.cloudflare_api_key | b64encode }}"
{% elif item.dns_provider == "route53" %}
  secret-access-key: "{{ lookup('hashi_vault', 'secret=clusters/route53:secret-access-key') | b64encode }}"
{% elif item.dns_provider == "ovh" %}
  applicationSecret: "{{ item.applicationSecret | b64encode }}"
{% endif %}