apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: ntfy-config namespace: {{ .Release.Namespace }} labels: app.kubernetes.io/name: ntfy-config {{- include "custom.labels" . | nindent 4 }} spec: secretStoreRef: kind: ClusterSecretStore name: openbao data: - secretKey: attachment-cache-dir remoteRef: key: /garage/home-infra/ntfy-attachments property: S3_URI