apiVersion: external-secrets.io/v1beta1 kind: SecretStore metadata: name: secretstore-sample spec: provider: ibm: serviceUrl: "https://SECRETS_MANAGER_ID.REGION.secrets-manager.appdomain.cloud" auth: containerAuth: profile: "test container auth profile" tokenLocation: "/var/run/secrets/tokens/sa-token" iamEndpoint: "https://iam.cloud.ibm.com" secretRef: secretApiKeySecretRef: name: ibm-secret key: apiKey