apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: sync-redis-secrets
spec:
  background: true
  generateExisting: true
  rules:
  - name: sync-prod-redis-secret
    generate:
      apiVersion: v1
      kind: Secret
      name: '{{ request.object.metadata.name }}'
      namespace: atlantis
      synchronize: true
      clone:
        name: prod-redis
        namespace: redis
    match:
     any:
     - resources:
         kinds:
         - Secret
         names:
         - prod-redis
         namespaces:
         - redis
  - name: sync-staging-redis-secret
    generate:
      apiVersion: v1
      kind: Secret
      name: staging-redis
      namespace: '{{ request.object.metadata.name }}'
      synchronize: true
      clone:
        name: staging-redis
        namespace: redis
    match:
     any:
     - resources:
         kinds:
         - Namespace
         names:
         - "vcluster-009dba7e-*"