apiVersion: external-secrets.io/v1beta1
kind: ClusterSecretStore
metadata:
  name: default
spec:
  provider:
    alibaba:
      regionID: REGION
      auth:
        rrsa:
          oidcProviderArn: OIDC_PROVIDER_ARN
          roleArn: ROLE_ARN