apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: backup-creds
  namespace: pg-databases
spec:
  refreshInterval: 1h
  secretStoreRef:
    name: bitwarden
    kind: ClusterSecretStore
  target:
    name: backup-creds
    creationPolicy: Owner
    template:
      engineVersion: v2
      mergePolicy: Merge
      data:
        ACCESS_KEY_ID: '{{ .accessKeyId }}'
        ACCESS_SECRET_KEY: '{{ .accessSecretKey }}'
  data:
    - secretKey: accessKeyId
      remoteRef:
        key: contabo-client-id

    - secretKey: accessSecretKey
      remoteRef:
        key: contabo-client-secret