{{- if .Values.authenticatedEmailsFile.enabled }}
{{- if and (.Values.authenticatedEmailsFile.restricted_access) (eq .Values.authenticatedEmailsFile.persistence "secret")  }}
apiVersion: v1
kind: Secret
type: Opaque
metadata:
  labels:
    app: {{ template "oauth2-proxy.name" . }}
{{- include "oauth2-proxy.labels" . | indent 4 }}
{{- if .Values.authenticatedEmailsFile.annotations }}
  annotations:
{{ toYaml .Values.authenticatedEmailsFile.annotations | indent 4 }}
{{- end }}
  name: {{ template "oauth2-proxy.fullname" . }}-accesslist
  namespace: {{ template "oauth2-proxy.namespace" $ }}
data:
  {{ default "restricted_user_access" .Values.authenticatedEmailsFile.restrictedUserAccessKey }}: {{ .Values.authenticatedEmailsFile.restricted_access | b64enc }}
{{- end }}
{{- end }}