---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: oauth2-proxy-creds
spec:
  target:
    name: oauth2-proxy-creds
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        client-id: oauth2-proxy
        client-secret: |-
          {{ .client_secret }}
        cookie-secret: |-
          {{ .cookie_secret }}
  data:
    - secretKey: client_secret
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: e62e8c4d-d538-43b2-a682-9cdf2a5a1165
        property: login.password
    - secretKey: cookie_secret
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: e62e8c4d-d538-43b2-a682-9cdf2a5a1165
        property: fields[0].value