---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: grafana-admin
spec:
  target:
    name: grafana-admin
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        GF_SERVER_ROOT_URL: https://gf.hexor.cy
        GF_DATABASE_USER: grafana
        password: |-
          {{ .password }}
        username: |-
          {{ .username }}
        GF_AUTH_GENERIC_OAUTH_CLIENT_ID: |-
          {{ .client_id }}
        GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET: |-
          {{ .client_secret }}
        GF_DATABASE_PASSWORD: |-
          {{ .psql_user }}
  data:
    - secretKey: password
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: 6a03357b-616e-4973-897a-93ccd675ddcb
        property: login.password
    - secretKey: username
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: 6a03357b-616e-4973-897a-93ccd675ddcb
        property: login.username
    - secretKey: client_id
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: 6a03357b-616e-4973-897a-93ccd675ddcb
        property: fields[0].value
    - secretKey: client_secret
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: 6a03357b-616e-4973-897a-93ccd675ddcb
        property: fields[1].value
    - secretKey: psql_user
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: 2a9deb39-ef22-433e-a1be-df1555625e22
        property: fields[2].value