apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: cc-jdbc
  namespace: abinitio-db
spec:
  data:
  - remoteRef:
      key: secret/abinitio/cc-jdbc
      property: username
    secretKey: username
  - remoteRef:
      key: secret/abinitio/cc-jdbc
      property: password
    secretKey: password
  refreshInterval: 1m
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault-store
  target:
    name: cc-jdbc
    template:
      data:
        jdbc-uri: jdbc:postgresql://controlcenter-db-rw.abinitio-db:5432/controlcenter?password={{
          .password }}&user={{ .username }}
        password: '{{ .password }}'
        pgpass: controlcenter-db-rw:5432:controlcenter:{{ .username }}:{{ .password
          }}
        uri: postgresql://{{ .username }}:{{ .password }}@controlcenter-db-rw.abinitio-db:5432/controlcenter
        username: '{{ .username }}'
      metadata:
        labels:
          cnpg.io/reload: "true"