apiVersion: external-secrets.io/v1beta1
kind: ClusterSecretStore
metadata:
  name: default
spec:
  provider:
    alibaba:
      auth:
        rrsa:
          oidcTokenFilePath: /var/run/secrets/tokens/oidc-token
          sessionName: secrets