apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: kimai-secrets
  namespace: kimai
spec:
  refreshInterval: 1h
  secretStoreRef:
    name: bitwarden
    kind: ClusterSecretStore
  target:
    name: kimai-secrets
    creationPolicy: Owner
  data:
    - secretKey: mariadb-root-password
      remoteRef:
        key: kimai-db-root-password

    - secretKey: mariadb-password
      remoteRef:
        key: kimai-db-password

    - secretKey: kimai-admin-username
      remoteRef:
        key: kimai-admin-username

    - secretKey: kimai-admin-password
      remoteRef:
        key: kimai-admin-password