--- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: gitea-runner-token namespace: gitea spec: refreshInterval: 1m target: name: gitea-runner-act-runner-secrets deletionPolicy: Delete template: type: Opaque data: token: |- {{ .password }} data: - secretKey: password sourceRef: storeRef: name: vaultwarden-login kind: ClusterSecretStore remoteRef: key: e475b5ab-ea3c-48a5-bb4c-a6bc552fc064 property: login.password