--- apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: tgproxy-secret spec: target: name: tgproxy-secret deletionPolicy: Delete template: type: Opaque data: SECRET: |- {{ .secret }} PORT: "30443" data: - secretKey: secret sourceRef: storeRef: name: vaultwarden-login kind: ClusterSecretStore remoteRef: key: 58a37daf-72d8-430d-86bd-6152aa8f888d property: fields[0].value