---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: movienight-cnpg-bootstrap
  namespace: movienight
spec:
  secretStoreRef:
    name: infisical
    kind: ClusterSecretStore

  target:
    name: movienight-cnpg-bootstrap
    creationPolicy: Owner
    template:
      engineVersion: v2
      type: kubernetes.io/basic-auth
      data:
        username: "{{ .dbUsername }}"
        password: "{{ .dbPassword }}"

  data:
    - secretKey: dbUsername
      remoteRef:
        key: /movienight/MOVIENIGHT_DB_USERNAME
    - secretKey: dbPassword
      remoteRef:
        key: /movienight/MOVIENIGHT_DB_PASSWORD

  refreshInterval: 1h