{{- if not .Values.runner.existingSecret }}
---
apiVersion: v1
kind: Secret

metadata:
  name: {{ include "semaphoreui.fullname" . }}-runner
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "semaphoreui.labels" . | nindent 4 }}
{{- if .Values.labels }}
    {{- toYaml .Values.labels | nindent 4 }}
{{- end }}
{{- if  .Values.annotations }}
  annotations:
    {{- toYaml .Values.annotations | nindent 4 }}
{{- end }}

type: Opaque
data:
  {{- $runnerSecretName := printf "%s-runner" (include "semaphoreui.fullname" .) }}
  {{- $runnerSecretObj := (lookup "v1" "Secret" .Release.Namespace $runnerSecretName) | default dict }}
  {{- $runnerSecretData := (get $runnerSecretObj "data") | default dict }}
  {{- $token := (get $runnerSecretData .Values.runner.tokenKey) | default (randAlphaNum 32 | b64enc) }}
  {{ .Values.runner.tokenKey }}: {{ .Values.runner.token | default ($token) }}
{{- end }}