apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: ag-appserver
  namespace: abinitio-db
spec:
  data:
  - remoteRef:
      key: secret/abinitio/ag-appserver
      property: username
    secretKey: username
  - remoteRef:
      key: secret/abinitio/ag-appserver
      property: password
    secretKey: password
  refreshInterval: 1m
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault-store
  target:
    name: ag-appserver
    template:
      data:
        jdbc-uri: jdbc:postgresql://authgateway-db-rw.abinitio-db:5432/authgateway?password={{
          .password }}&user={{ .username }}
        password: '{{ .password }}'
        pgpass: authgateway-db-rw:5432:authgateway:{{ .username }}:{{ .password }}
        uri: postgresql://{{ .username }}:{{ .password }}@authgateway-db-rw.abinitio-db:5432/authgateway
        username: '{{ .username }}'
      metadata:
        labels:
          cnpg.io/reload: "true"