{{- if and .Values.aptly.gpg.enabled (not .Values.aptly.gpg.signingKey.existingSecret) (.Values.aptly.gpg.signingKey.privateKey) }}
apiVersion: v1
kind: Secret
metadata:
  name: {{ include "aptly.fullname" . }}-gpg
  labels:
    {{- include "aptly.labels" . | nindent 4 }}
type: Opaque
stringData:
  privateKey: {{ .Values.aptly.gpg.signingKey.privateKey | quote }}
  {{- if .Values.aptly.gpg.signingKey.passphrase }}
  passphrase: {{ .Values.aptly.gpg.signingKey.passphrase | quote }}
  {{- end }}
{{- end }}