---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: romm-db-env-secrets
spec:
  secretStoreRef:
    name: vault-wheatley
    kind: ClusterSecretStore
  target:
    name: romm-db-env-secrets
  data:
    - secretKey: MARIADB_ROOT_PASSWORD
      remoteRef:
        key: secrets/managed/romm/romm-db
        property: ROOT_PASSWORD
    - secretKey: MARIADB_PASSWORD
      remoteRef:
        key: secrets/managed/romm/romm-db
        property: PASSWORD
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: romm-env-secrets
spec:
  secretStoreRef:
    name: vault-wheatley
    kind: ClusterSecretStore
  target:
    name: romm-env-secrets
  data:
    - secretKey: DB_PASSWD
      remoteRef:
        key: secrets/managed/romm/romm-db
        property: PASSWORD
    - secretKey: ROMM_AUTH_SECRET_KEY
      remoteRef:
        key: secrets/managed/romm/romm
        property: SECRET_KEY
    - secretKey: IGDB_CLIENT_ID
      remoteRef:
        key: secrets/managed/romm/romm
        property: IGDB_CLIENT_ID
    - secretKey: IGDB_CLIENT_SECRET
      remoteRef:
        key: secrets/managed/romm/romm
        property: IGDB_CLIENT_SECRET
    - secretKey: STEAMGRIDDB_API_KEY
      remoteRef:
        key: secrets/managed/romm/romm
        property: STEAMGRIDDB_API_KEY