--- apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: teslamate-config namespace: teslamate spec: refreshInterval: 1h secretStoreRef: name: vault-backend kind: ClusterSecretStore target: name: teslamate-config-secret creationPolicy: Owner data: - secretKey: encryption-key remoteRef: key: teslamate/config property: encryption_key