apiVersion: external-secrets.io/v1beta1
kind: ClusterExternalSecret
metadata:
  name: ces
spec:
  externalSecretName: hello-world-es
  externalSecretSpec:
    data:
    - remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /foo
        property: key
      secretKey: mykey
    refreshInterval: 1h
    secretStoreRef:
      kind: ClusterSecretStore
      name: secretmanager
    target:
      creationPolicy: Owner
      deletionPolicy: Retain
      name: mysecret
      template:
        data:
          somekey: '{{ .somecreds }}'
        engineVersion: v2
        type: Opaque
  namespaceSelector:
    matchLabels:
      cool: label
status:
  conditions:
  - message: one or more namespaces failed
    status: "True"
    type: NotReady
  - message: one or more namespaces failed
    status: "True"
    type: PartiallyReady
  failedNamespaces:
  - namespace: default
    reason: external secret already exists in namespace
  provisionedNamespaces:
  - other-namespace
