External Secrets Operator

1apiVersion: external-secrets.io/v1beta1
2kind: SecretStore
3metadata:
4  name: aws-secrets
5  namespace: default
6spec:
7  provider:
8    aws:
9      service: SecretsManager
10      region: us-east-1

1apiVersion: external-secrets.io/v1beta1
2kind: ExternalSecret
3metadata:
4  name: app-db-credentials
5  namespace: default
6spec:
7  refreshInterval: 1h
8  secretStoreRef:
9    name: aws-secrets
10    kind: SecretStore
11  target:
12    name: db-credentials
13    creationPolicy: Owner
14  data:
15    - secretKey: password
16      remoteRef:
17        key: prod/myapp/db
18        property: password