apiVersion: external-secrets.io/v1
kind: ClusterSecretStore
metadata:
  name: bitwarden
spec:
  provider:
    bitwardensecretsmanager:
      apiURL: https://api.bitwarden.com
      identityURL: https://identity.bitwarden.com
      bitwardenServerSDKURL: https://bitwarden-sdk-server.external-secrets.svc.cluster.local:9998
      caProvider:
        type: Secret
        name: bitwarden-tls-certs
        namespace: external-secrets
        key: ca.crt
      organizationID: 0df293ad-6afb-4d0b-b3ff-b41000581de5
      projectID: cafdbc0f-9d64-47eb-a0f5-b4100059cbc7
      auth:
        secretRef:
          credentials:
            key: token
            name: bitwarden-access-token
            namespace: security