apiVersion: external-secrets.io/v1alpha1 kind: PushSecret metadata: name: example spec: secretStoreRefs: - name: keeper kind: SecretStore refreshInterval: "1h" deletionPolicy: Delete selector: secret: name: secret-name # k8s secret to be pushed data: - match: secretKey: secret-key # k8s key within the secret to be pushed remoteRef: remoteKey: remote-secret-name/remote-secret-key # This will create a record called "remote-secret-name" with a key "remote-secret-key"