apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: {{ include "thermo.fullname" . }}-postgres-secret
  labels:
    {{- include "thermo.labels" . | nindent 4 }}
spec:
  refreshInterval: {{ .Values.externalSecrets.refreshInterval }}
  secretStoreRef:
    name: {{ .Values.externalSecrets.secretStore.name }}
    kind: {{ .Values.externalSecrets.secretStore.kind }}
  target:
    name: {{ include "thermo.fullname" . }}-postgres-secret
    creationPolicy: Owner
    template:
      type: Opaque
      data:
        POSTGRES_DB: {{ .Values.postgres.database | quote }}
        POSTGRES_USER: {{ .Values.postgres.writerUser | quote }}
        POSTGRES_PASSWORD: {{ "{{ .writer_password }}" | quote }}
        GRAFANA_USER: {{ .Values.postgres.readerUser | quote }}
        GRAFANA_PASSWORD: {{ "{{ .reader_password }}" | quote }}
  data:
    - secretKey: writer_password
      remoteRef:
        key: {{ .Values.externalSecrets.writerPasswordKey }}
    - secretKey: reader_password
      remoteRef:
        key: {{ .Values.externalSecrets.readerPasswordKey }}
---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: {{ include "thermo.fullname" . }}-postgres-redpanda
  labels:
    {{- include "thermo.labels" . | nindent 4 }}
spec:
  refreshInterval: {{ .Values.externalSecrets.refreshInterval }}
  secretStoreRef:
    name: {{ .Values.externalSecrets.secretStore.name }}
    kind: {{ .Values.externalSecrets.secretStore.kind }}
  target:
    name: {{ include "thermo.fullname" . }}-postgres-redpanda
    creationPolicy: Owner
    template:
      type: Opaque
      data:
        THERMO_POSTGRES_DSN: {{ printf "postgres://%s:%s@%s-postgres.%s.svc.cluster.local:5432/%s?sslmode=disable" .Values.postgres.writerUser "{{ .writer_password }}" (include "thermo.fullname" .) .Release.Namespace .Values.postgres.database | quote }}
  data:
    - secretKey: writer_password
      remoteRef:
        key: {{ .Values.externalSecrets.writerPasswordKey }}