# yaml-language-server: $schema=../../../../api/jsonschema/harp.bundle.v1/Patch.json
apiVersion: harp.elastic.co/v1
kind: BundlePatch
meta:
  name: "secret-remover"
  owner: security@elastic.co
  description: "Remove secrets using strict matcher and regex"
spec:
  rules:
    - selector:
        matchSecret:
          strict: USER
      package:
        data:
          kv:
            remove:
              - USER
    - selector:
        matchSecret:
          regex: _KEY$
      package:
        data:
          kv:
            removeKeys:
              - _KEY$
