apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: roundcube-key namespace: {{ .Release.Namespace }} labels: app.kubernetes.io/name: roundcube-key {{- include "custom.labels" . | nindent 4 }} spec: secretStoreRef: kind: ClusterSecretStore name: openbao data: - secretKey: DES_KEY remoteRef: key: /cl01tl/roundcube/key property: des-key