---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: airm-realm-credentials
  namespace: keycloak
spec:
  data:
    - remoteRef:
        key: airm-ui-keycloak-secret
      secretKey: FRONTEND_CLIENT_SECRET
    - remoteRef:
        key: airm-keycloak-admin-client-id
      secretKey: ADMIN_CLIENT_ID
    - remoteRef:
        key: airm-keycloak-k8s-client-secret
      secretKey: K8S_CLIENT_SECRET
    - remoteRef:
        key: airm-keycloak-admin-client-secret
      secretKey: ADMIN_CLIENT_SECRET
    - remoteRef:
        key: airm-ci-client-secret
      secretKey: CI_CLIENT_SECRET
  refreshInterval: 1h
  secretStoreRef:
    kind: ClusterSecretStore
    name: keycloak-secret-store
  target:
    creationPolicy: Owner
    name: airm-realm-credentials