--- apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: radarr-archive-db spec: secretStoreRef: kind: ClusterSecretStore name: crunchy-pgo-secrets target: name: radarr-archive-db-secret template: engineVersion: v2 data: RADARR__POSTGRES__MAINDB: '{{ index . "dbname" }}' RADARR__POSTGRES__LOGDB: radarr_archive_log RADARR__POSTGRES__HOST: '{{ index . "host" }}' RADARR__POSTGRES__USER: '{{ index . "user" }}' RADARR__POSTGRES__PASSWORD: '{{ index . "password" }}' RADARR__POSTGRES__PORT: '{{ index . "port" }}' dataFrom: - extract: key: postgres-pguser-radarr-archive