apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: postgresql-es namespace: ente-photos spec: refreshInterval: "15s" secretStoreRef: name: vault-backend kind: ClusterSecretStore target: name: postgres-config dataFrom: - extract: key: ente-photos-postgres