apiVersion: external-secrets.io/v1
kind: ClusterSecretStore
metadata: { name: bitwarden-login }
spec:
  provider:
    webhook:
      url: "http://bitwarden-cli.infra.svc:8087/object/item/{{ .remoteRef.key }}"
      result: { jsonPath: "$.data.login.{{ .remoteRef.property }}" }
---
apiVersion: external-secrets.io/v1
kind: ClusterSecretStore
metadata: { name: bitwarden-fields }
spec:
  provider:
    webhook:
      url: "http://bitwarden-cli.infra.svc:8087/object/item/{{ .remoteRef.key }}"
      result:
        {
          jsonPath: '$.data.fields[?@.name=="{{ .remoteRef.property }}"].value',
        }