---
# Example: Mirror a secret to all namespaces matching a pattern
apiVersion: v1
kind: Secret
metadata:
  name: tls-cert
  namespace: default
  labels:
    kubemirror.raczylo.com/enabled: "true"
  annotations:
    kubemirror.raczylo.com/sync: "true"
    # Mirror to all namespaces starting with "app-"
    kubemirror.raczylo.com/target-namespaces: "app-*"
type: kubernetes.io/tls
data:
  tls.crt: LS0tLS1CRUdJTi...  # Base64 encoded cert
  tls.key: LS0tLS1CRUdJTi...  # Base64 encoded key