apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: openai-creds
spec:
  refreshInterval: 5m
  secretStoreRef:
    kind: ClusterSecretStore
    name: vaultwarden-login
  target:
    name: openai-creds
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        USER: "{{ .user }}"
        PASS: "{{ .pass }}"
        TOTP: "{{ .totp }}"
  data:
    - secretKey: user
      remoteRef:
        key: k8s/openai/creds
        property: login.username
    - secretKey: pass
      remoteRef:
        key: k8s/openai/creds
        property: login.password
    - secretKey: totp
      remoteRef:
        key: k8s/openai/creds
        property: login.totp