---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: keycloak-creds
spec:
  target:
    name: keycloak-creds
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        KC_DB_USERNAME: keycloak
        KC_DB_PASSWORD: |-
          {{ .db_password }}
        KC_BOOTSTRAP_ADMIN_USERNAME: admin
        KC_BOOTSTRAP_ADMIN_PASSWORD: |-
          {{ .admin_password }}
  data:
    - secretKey: db_password
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: 2a9deb39-ef22-433e-a1be-df1555625e22
        property: fields[18].value
    - secretKey: admin_password
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: 9422b636-a91d-40e4-bf98-925b2a3f831d
        property: login.password