--- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: keycloak-credentials namespace: keycloak spec: data: - remoteRef: key: keycloak_initial_admin_password secretKey: KEYCLOAK_INITIAL_ADMIN_PASSWORD refreshInterval: 1h secretStoreRef: kind: ClusterSecretStore name: keycloak-secret-store target: creationPolicy: Owner name: keycloak-credentials