apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: contabo-s3-creds namespace: backups spec: refreshInterval: 1h secretStoreRef: name: your-secret-store kind: ClusterSecretStore target: name: contabo-s3-creds creationPolicy: Owner data: - secretKey: AWS_ACCESS_KEY_ID remoteRef: key: contabo-access-key - secretKey: AWS_SECRET_ACCESS_KEY remoteRef: key: contabo-secret-key