apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: {{ include "myapp.fullname" . }}-secret

spec:
  refreshInterval: {{ .Values.vault.refreshInterval }}

  secretStoreRef:
    name: {{ .Values.vault.secretStore }}
    kind: ClusterSecretStore

  target:
    name: {{ include "myapp.fullname" . }}-secret
    creationPolicy: Owner

  dataFrom:
    - extract:
        key: {{ .Values.vault.secretPath }}