apiVersion: external-secrets.io/v1
kind: ClusterSecretStore
metadata:
  name: bitwarden
spec:
  provider:
    bitwardensecretsmanager:
      apiURL: https://api.bitwarden.com
      identityURL: https://identity.bitwarden.com
      bitwardenServerSDKURL: https://sdk.bitwarden.com
      caProvider:
        type: ConfigMap
        name: kube-root-ca.crt
        namespace: security
        key: ca.crt
      # This org ID is already used by your Bitwarden operator resources.
      organizationID: 0df293ad-6afb-4d0b-b3ff-b41000581de5
      # Set this to your Bitwarden Secrets Manager Project ID.
      projectID: cafdbc0f-9d64-47eb-a0f5-b4100059cbc7
      auth:
        secretRef:
          credentials:
            key: token
            name: bitwarden-access-token
            namespace: security