resource "kubernetes_secret" "this" {
  for_each = {
    for idx, secret in var.secrets : secret.name => secret
  }

  metadata {
    name        = each.value.name
    namespace   = each.value.namespace
    labels      = try(each.value.labels, {})
    annotations = try(each.value.annotations, {})
  }

  type = each.value.secret_type

  data = each.value.data

  lifecycle {
    ignore_changes = each.value.ignore_changes ? [data] : []
  }
}