---
# VPS MinIO credentials for CNPG's barmanObjectStore backup target, and reused
# by the Phase 1b PVC-content sync CronJob. Same Vault source as
# infrastructure/vault/manifests/raft-snapshot-cronjob.yaml
# (secret/vps-minio-credentials) - populated once, manually, after VPS bootstrap.
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: vps-minio-credentials
  namespace: nextcloud
spec:
  refreshInterval: 1h
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault-backend
  target:
    name: vps-minio-secret
    creationPolicy: Owner
  data:
    - secretKey: accesskey
      remoteRef:
        key: vps-minio-credentials
        property: access-key
    - secretKey: secretkey
      remoteRef:
        key: vps-minio-credentials
        property: secret-key