---
# yaml-language-server: $schema=https://ks.hsn.dev/external-secrets.io/externalsecret_v1beta1.json
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: &name crunchy-postgres
spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: onepassword-connect
  target:
    name: crunchy-postgres-secret
    template:
      engineVersion: v2
      data:
        s3.conf: |
          [global]
          repo1-s3-key={{ .minio_crunchy_postgres_access_key }}
          repo1-s3-key-secret={{ .minio_crunchy_postgres_secret_key }}
          repo1-s3-verify-tls=false
        encryption.conf: |
          [global]
          repo1-cipher-pass={{ .crunchy_postgres_backup_encryption_cipher }}
  dataFrom:
    - extract:
        key: crunchy-postgres
      rewrite:
        - regexp:
            source: "(.*)"
            target: "crunchy_postgres_$1"
    - extract:
        key: minio
      rewrite:
        - regexp:
            source: "[-]"
            target: "_"
        - regexp:
            source: "(.*)"
            target: "minio_$1"
    - extract:
        key: hetzner
      rewrite:
        - regexp:
            source: "[^a-zA-Z0-9 -]"
            target: "_"
        - regexp:
            source: "(.*)"
            target: "hetzner_$1"