# Template SecretStore - Vault Backend
#
# Copy this file to your `secrets-<repo-name>/` folder and customize the values.
# Replace:
#  - vault.example.com with your actual Vault server
#  - my-app-role with the role configured in Vault
#  - default with your application's namespace

apiVersion: external-secrets.io/v1beta1
kind: SecretStore
metadata:
  name: vault-secretstore
  namespace: default  # CHANGE: Your application's namespace
spec:
  provider:
    vault:
      server: "https://vault.example.com:8200"  # CHANGE: Your Vault server URL
      path: "secret"                              # CHANGE: Your secret path in Vault
      auth:
        kubernetes:
          mountPath: "kubernetes"
          role: "my-app-role"                    # CHANGE: Your Vault auth role