k3s/services/nest-matrix-bot/nest-matrix-bot-external-secret.yaml

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: matrix-bot-credentials
  namespace: default
spec:
  refreshInterval: 1h
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault-external-secrets-store
  target:
    name: matrix-bot-credentials
    creationPolicy: Owner
  data:
    - secretKey: bot-pass
      remoteRef:
        key: nest-matrix-bot
        property: bot-pass
    - secretKey: client-id
      remoteRef:
        key: nest-matrix-bot
        property: client-id
    - secretKey: client-secret
      remoteRef:
        key: nest-matrix-bot
        property: client-secret
    - secretKey: recovery-key
      remoteRef:
        key: nest-matrix-bot
        property: bot-security-keys