--- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: argo-cd-sso namespace: argo-cd spec: secretStoreRef: name: secret-store kind: ClusterSecretStore target: name: argo-cd-sso template: metadata: labels: app.kubernetes.io/part-of: argocd dataFrom: - extract: key: argo-cd-sso conversionStrategy: Default decodingStrategy: Auto