apiVersion: external-secrets.io/v1alpha1
kind: PushSecret
metadata:
  name: letsencrypt-cert-push
  namespace: tidb-admin 
spec:
  updatePolicy: Replace
  deletionPolicy: None
  refreshInterval: 1h
  secretStoreRefs:
    - name: alicloud-secrets
      kind: ClusterSecretStore
  selector:
    secret:
      name: gateway-letsencrypt-secret
  data:
    - match:
        secretKey: tls.crt
        remoteRef:
          remoteKey: <to-be-changed>
          property: tls.crt
    - match:
        secretKey: tls.key
        remoteRef:
          remoteKey: <to-be-changed>
          property: tls.key