apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: traefik-dashboard-basic-auth
spec:
  secretStoreRef:
    name: vault-secret-store
    kind: ClusterSecretStore
  refreshInterval: "6h"
  target:
    name: traefik-dashboard-basic-auth
    deletionPolicy: Retain
  dataFrom:
  - extract:
      key: kubernetes-secrets/traefik/traefik-dashboard-basic-auth