apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: auth-generic-oauth-secret
  namespace: monitoring
spec:
  secretStoreRef:
    name: keycloak
    kind: ClusterSecretStore
  refreshInterval: "0"
  target:
    name: auth-generic-oauth-secret
    template:
      engineVersion: v2
      data:
        client_secret: "{{.GRAFANA_CLIENT_SECRET}}"
  data:
    - secretKey: GRAFANA_CLIENT_SECRET
      remoteRef:
        key: keycloak-clients
        property: GRAFANA_CLIENT_SECRET