---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: grafana-admin
spec:
  target:
    name: grafana-admin
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        GF_SERVER_ROOT_URL: https://gf.hexor.cy
        GF_DATABASE_USER: grafana
        password: |-
          {{ .password }}
        username: |-
          {{ .username }}
        GF_AUTH_GENERIC_OAUTH_CLIENT_ID: |-
          {{ .client_id }}
        GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET: |-
          {{ .client_secret }}
        GF_DATABASE_PASSWORD: |-
          {{ .psql_user }}
  data:
    - secretKey: password
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: 6a03357b-616e-4973-897a-93ccd675ddcb
        property: login.password
    - secretKey: username
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: 6a03357b-616e-4973-897a-93ccd675ddcb
        property: login.username
    - secretKey: client_id
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: 6a03357b-616e-4973-897a-93ccd675ddcb
        property: fields[0].value
    - secretKey: client_secret
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: 6a03357b-616e-4973-897a-93ccd675ddcb
        property: fields[1].value
    - secretKey: psql_user
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: 2a9deb39-ef22-433e-a1be-df1555625e22
        property: fields[2].value

---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: alertmanager-telegram
spec:
  target:
    name: alertmanager-telegram-secret
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        TELEGRAM_BOT_TOKEN: |-
          {{ .bot_token }}
        TELEGRAM_CHAT_ID: |-
          {{ .chat_id }}
  data:
    - secretKey: bot_token
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: eca0fb0b-3939-40a8-890a-6294863e5a65
        property: fields[0].value
    - secretKey: chat_id
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: eca0fb0b-3939-40a8-890a-6294863e5a65
        property: fields[1].value

---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: grafana-telegram
spec:
  target:
    name: grafana-telegram
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        bot-token: |-
          {{ .bot_token }}
        chat-id: |-
          "{{ .chat_id }}"
  data:
    - secretKey: bot_token
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: eca0fb0b-3939-40a8-890a-6294863e5a65
        property: fields[0].value
    - secretKey: chat_id
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: eca0fb0b-3939-40a8-890a-6294863e5a65
        property: fields[1].value