apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: musicseerr-secrets namespace: default spec: refreshInterval: "1h" secretStoreRef: name: vault-external-secrets-store kind: ClusterSecretStore target: name: musicseerr-secrets creationPolicy: Owner data: - secretKey: LIDARR_API_KEY remoteRef: key: lidarr property: api-key