apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: rustdesk-keys
spec:
  refreshInterval: 1h
  secretStoreRef:
    name: vaultwarden-fields
    kind: ClusterSecretStore
  target:
    name: rustdesk-keys
    creationPolicy: Owner
    deletionPolicy: Retain
    template:
      type: Opaque
      data:
        id_ed25519: "{{ .private_key }}"
        id_ed25519.pub: "{{ .public_key }}"
  data:
    - secretKey: private_key
      remoteRef:
        key: k8s/rustdesk/secrets
        property: Cert
    - secretKey: public_key
      remoteRef:
        key: k8s/rustdesk/secrets
        property: Key