---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: oidc-secret
spec:
  target:
    name: oidc-secret
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        OAUTH_CLIENT_SECRET: |-
          {{ .OAUTH_CLIENT_SECRET }}
        OAUTH_CLIENT_ID: |-
          {{ .OAUTH_CLIENT_ID }}
  data:
    - secretKey: OAUTH_CLIENT_SECRET
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        key: 97959a8b-e3b2-4b34-bc54-ddb6476a12ea
        property: fields[0].value
    - secretKey: OAUTH_CLIENT_ID
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        key: 97959a8b-e3b2-4b34-bc54-ddb6476a12ea
        property: fields[1].value