eso

myapp/templates/deployment.yaml

@@ -42,7 +42,7 @@ spec:
           - configMapRef:
               name: {{ include "myapp.fullname" . }}-config
           - secretRef:
-              name: {{ include "myapp.fullname" . }}-secret
+              name: {{ .Values.secret.name }}
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           ports:
             - name: http

myapp/templates/external-secret.yaml

@@ -0,0 +1,19 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: {{ include "myapp.fullname" . }}-secret
+
+spec:
+  refreshInterval: {{ .Values.vault.refreshInterval }}
+
+  secretStoreRef:
+    name: {{ .Values.vault.secretStore }}
+    kind: ClusterSecretStore
+
+  target:
+    name: {{ include "myapp.fullname" . }}-secret
+    creationPolicy: Owner
+
+  dataFrom:
+    - extract:
+        key: {{ .Values.vault.secretPath }}

myapp/templates/secret.yaml

@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: Secret
-
-metadata:
-  name: {{ include "myapp.fullname" . }}-secret
-
-type: Opaque
-
-stringData:
-
-{{- range $key, $value := .Values.secret }}
-  {{ $key }}: "{{ $value }}"
-{{- end }}