apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: tidb-server-cluster-issuer-secrets
spec:
  refreshInterval: 1h # rate ESO pulls Azure Key Vault
  secretStoreRef:
    kind: ClusterSecretStore
    name: default # name of the SecretStore (or kind specified)
  target:
    name: tidb-server-cluster-issuer-ca # name of the k8s Secret to be created
  data:
    - secretKey: "tidb-server-cluster-issuer-ca"
      remoteRef:
        key: tidb-server-cluster-issuer-ca