base/external-secrets/configurations/external-secrets.yaml

@@ -0,0 +1,10 @@
+---
+nameReference:
+- kind: Secret
+  fieldSpecs:
+  - path: spec/target/name
+    kind: ExternalSecret
+- kind: Secret
+  fieldSpecs:
+  - path: spec/selector/secret/name
+    kind: PushSecret

base/external-secrets/kustomization.yaml

@@ -0,0 +1,17 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: external-secrets
+
+resources:
+  - namespace.yaml
+
+configurations:
+- ./configurations/external-secrets.yaml
+
+helmCharts:
+- name: external-secrets
+  repo: https://charts.external-secrets.io
+  namespace: external-secrets
+  version: 0.17.0
+  releaseName: c-kustom

base/external-secrets/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: external-secrets

base/kustomization.yaml

@@ -11,4 +11,5 @@ resources:
 - ./minio
 - ./metrics
 - ./nginx
+- ./external-secrets
 #- ./cloudnative-pg-operator