apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: kimai-secrets
  namespace: kimai
spec:
  refreshInterval: 1h
  secretStoreRef:
    name: bitwarden
    kind: ClusterSecretStore
  target:
    name: kimai-secrets
    creationPolicy: Owner
    template:
      engineVersion: v2
      mergePolicy: Merge
      data:
        app-secret: '{{ index . "kimai-admin-password" }}'
        admin-email: '{{ index . "kimai-admin-username" }}'
        admin-password: '{{ index . "kimai-admin-password" }}'
        mailer-url: 'null://localhost'
        database-url: 'mysql://kimai:{{ index . "mariadb-password" | urlquery }}@kimai-mariadb/kimai?charset=utf8&serverVersion=10.6'
        password: '{{ index . "mariadb-password" }}'
        root-password: '{{ index . "mariadb-root-password" }}'
  data:
    - secretKey: mariadb-root-password
      remoteRef:
        key: kimai-db-root-password

    - secretKey: mariadb-password
      remoteRef:
        key: kimai-db-password

    - secretKey: kimai-admin-username
      remoteRef:
        key: kimai-admin-username

    - secretKey: kimai-admin-password
      remoteRef:
        key: kimai-admin-password