# Template SecretStore - Kubernetes Backend
#
# Use this if you want to sync secrets from another Kubernetes namespace
# or use Kubernetes as your secret backend.
#
# Copy this file to your `secrets-<repo-name>/` folder and customize.

apiVersion: external-secrets.io/v1beta1
kind: SecretStore
metadata:
  name: k8s-secretstore
  namespace: default  # CHANGE: Your application's namespace
spec:
  provider:
    kubernetes:
      remoteNamespace: "secrets-management"  # CHANGE: Namespace containing source secrets
      auth:
        serviceAccount:
          name: external-secrets-reader      # CHANGE: ServiceAccount name for reading