fix: only create vault secret template if actual secret found

Signed-off-by: kjuulh <contact@kjuulh.io>

crates/cuddle-clusters/src/catalog/vault_secret.rs

@@ -74,9 +74,29 @@ impl Component for VaultSecret {
     fn render(
         &self,
         _environment: &str,
-        _value: &serde_yaml::Value,
+        value: &serde_yaml::Value,
     ) -> Option<anyhow::Result<(String, String)>> {
-        Some(Ok((
+        value
+            .as_mapping()
+            .and_then(|map| map.get("env"))
+            .and_then(|v| v.as_mapping())
+            .map(|v| {
+                v.iter()
+                    .filter_map(|(k, v)| {
+                        if v.as_mapping()
+                            .map(|m| m.get("vault").filter(|v| v.as_bool() == Some(true)))
+                            .is_some()
+                        {
+                            Some(k)
+                        } else {
+                            None
+                        }
+                    })
+                    .filter_map(|k| k.as_str())
+                    .collect::<Vec<_>>()
+            })
+            .map(|_| {
+                Ok((
                     format!("{}.yaml", self.name().replace("/", "_")),
                     r#"apiVersion: secrets.hashicorp.com/v1beta1
 kind: VaultStaticSecret
@@ -93,7 +113,8 @@ spec:
   type: kv-v2
 "#
                     .into(),
-        )))
+                ))
+            })
     }
 }