---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: grafana-oauth
  namespace: prometheus
spec:
  secretStoreRef:
    name: secret-store
    kind: ClusterSecretStore
  target:
    name: grafana-oauth
    template:
      metadata:
        labels:
          app.kubernetes.io/part-of: grafana
  dataFrom:
    - extract:
        key: prometheus/grafana-sso
        conversionStrategy: Default
        decodingStrategy: None