# ------------------------------------------------------------------------------
# ExternalSecrets — monitoring namespace secrets from 1Password
# ------------------------------------------------------------------------------

# Grafana admin credentials
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: grafana-admin-secret
  namespace: monitoring
spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: onepassword-connect
  refreshInterval: "1h"
  target:
    name: grafana-admin-secret
    creationPolicy: Owner
  data:
    - secretKey: admin-user
      remoteRef:
        key: grafana-admin
        property: admin-user
    - secretKey: admin-password
      remoteRef:
        key: grafana-admin
        property: admin-password
---
# Proxmox VE Exporter API token
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: pve-exporter-secret
  namespace: monitoring
spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: onepassword-connect
  refreshInterval: "1h"
  target:
    name: pve-exporter-secret
    creationPolicy: Owner
  data:
    - secretKey: token-value
      remoteRef:
        key: proxmox-prometheus
        property: token-value
---
# SNMP community string
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: snmp-community-secret
  namespace: monitoring
spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: onepassword-connect
  refreshInterval: "1h"
  target:
    name: snmp-community-secret
    creationPolicy: Owner
  data:
    - secretKey: community
      remoteRef:
        key: snmp-community
        property: community