apiVersion: onepassword.com/v1
kind: OnePasswordItem
metadata:
  name: {{ .Release.Name }}-{{ .Chart.Name }}-secret
spec:
  # The item must carry the field "auth-conf", holding the complete
  # configuration line "requirepass <password>" - the 1Password operator
  # materializes one Secret key per item field, so the field NAME is what the
  # chart depends on. NOTES.txt prints this, and the init container refuses to
  # start the pod if the line is not there.
  itemPath: {{ required "You must provide an auth Secret Reference (secrets.authSecretRef) - the 1Password item holding this instance's 'requirepass <password>' line" .Values.secrets.authSecretRef }}