kind: ExternalSecret

kubectl apply -n YOUR-NS -f (echo '
                                                   apiVersion: external-secrets.io/v1beta1
                                                   kind: ExternalSecret
                                                   metadata:
                                                     name: temporal-frontend-api-tls
                                                     namespace: asx-qa
                                                   spec:
                                                     refreshInterval: 1h
                                                     secretStoreRef:
                                                       name: secrets-manager
                                                       kind: ClusterSecretStore
                                                     target:
                                                       name: temporal-frontend-api-tls
                                                       creationPolicy: Owner
                                                       template:
                                                         type: kubernetes.io/tls
                                                     data:
                                                       - secretKey: tls.crt
                                                         remoteRef:
                                                           key: catims/wildcard-tls
                                                           property: cert
                                                       - secretKey: tls.key
                                                         remoteRef:
                                                           key: catims/wildcard-tls
                                                           property: key
                                                   ' | psub)

• External Secrets Operator
• external-secrets.io
• config_template.yaml

Related

• helm install temporal
• ESO

See also

• kind: ExternalSecret
• Kubernetes secrets: types, kubectl [ get | create | describe | delete | secret ] secrets, secret.yml, kind: Secret, secretKeyRef, default-token, imagePullSecrets:, kubernetes.io/dockerconfigjson, External Secrets Operator ( kind: ExternalSecret), Kubeseal