apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: airtrail-creds
spec:
  target:
    name: airtrail-creds
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        DB_URL: |-
          postgresql://airtrail:{{ .airtrail | trim | urlquery | replace "+" "%20" }}@psql.psql.svc:5432/airtrail
  data:
    - secretKey: airtrail
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: 2a9deb39-ef22-433e-a1be-df1555625e22
        property: fields[21].value