---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: pasarguard-secrets
spec:
  target:
    name: pasarguard-secrets
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        SUDO_PASSWORD: |-
          {{ .admin_password }}
        SUDO_USERNAME: |-
          {{ .admin_username }}
        SQLALCHEMY_DATABASE_URL : |-
          postgresql+asyncpg://pasarguard:{{ .pg_pass }}@psql.psql.svc:5432/pasarguard

  data:
    - secretKey: pg_pass
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        key: 2a9deb39-ef22-433e-a1be-df1555625e22
        property: fields[9].value
    - secretKey: admin_password
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        key: 35ec5880-2576-401b-a89a-3c9d56b9c1de
        property: login.password
    - secretKey: admin_username
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        key: 35ec5880-2576-401b-a89a-3c9d56b9c1de
        property: login.username