---
# Example: Mirror a secret to specific namespaces
apiVersion: v1
kind: Secret
metadata:
  name: my-app-secret
  namespace: default
  labels:
    # REQUIRED: Enable mirroring with label (for server-side filtering)
    kubemirror.raczylo.com/enabled: "true"
  annotations:
    # REQUIRED: Sync annotation
    kubemirror.raczylo.com/sync: "true"
    # REQUIRED: Target namespaces (comma-separated)
    kubemirror.raczylo.com/target-namespaces: "app1,app2,app3"
type: Opaque
data:
  username: YWRtaW4=  # admin
  password: cGFzc3dvcmQxMjM=  # password123