fix: update the refreshInterval formatting _everywhere_ (#5680)

* fix: update the refreshInterval formatting _everywhere_

Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>

* fix the line with default zero value

Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>

---------

Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>

apis/externalsecrets/v1/externalsecret_types.go

@@ -519,9 +519,9 @@ type ExternalSecretSpec struct {
 	// RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
 	// specified as Golang Duration strings.
 	// Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
-	// Example values: "1h", "2h30m", "10s"
-	// May be set to zero to fetch and create it once. Defaults to 1h.
-	// +kubebuilder:default="1h"
+	// Example values: "1h0m0s", "2h30m0s", "10m0s"
+	// May be set to "0s" to fetch and create it once. Defaults to 1h0m0s.
+	// +kubebuilder:default="1h0m0s"
 	RefreshInterval *metav1.Duration `json:"refreshInterval,omitempty"`
 
 	// Data defines the connection between the Kubernetes Secret keys and the Provider data

apis/externalsecrets/v1alpha1/pushsecret_types.go

@@ -88,7 +88,7 @@ const (
 // PushSecretSpec configures the behavior of the PushSecret.
 type PushSecretSpec struct {
 	// The Interval to which External Secrets will try to push a secret definition
-	// +kubebuilder:default="1h"
+	// +kubebuilder:default="1h0m0s"
 	RefreshInterval *metav1.Duration `json:"refreshInterval,omitempty"`
 
 	SecretStoreRefs []PushSecretStoreRef `json:"secretStoreRefs"`

apis/externalsecrets/v1beta1/externalsecret_types.go

@@ -428,9 +428,9 @@ type ExternalSecretSpec struct {
 	// RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
 	// specified as Golang Duration strings.
 	// Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
-	// Example values: "1h", "2h30m", "10s"
-	// May be set to zero to fetch and create it once. Defaults to 1h.
-	// +kubebuilder:default="1h"
+	// Example values: "1h0m0s", "2h30m0s", "10m0s"
+	// May be set to "0s" to fetch and create it once. Defaults to 1h0m0s.
+	// +kubebuilder:default="1h0m0s"
 	RefreshInterval *metav1.Duration `json:"refreshInterval,omitempty"`
 
 	// Data defines the connection between the Kubernetes Secret keys and the Provider data

config/crds/bases/external-secrets.io_clusterexternalsecrets.yaml

@@ -459,13 +459,13 @@ spec:
                       type: object
                     type: array
                   refreshInterval:
-                    default: 1h
+                    default: 1h0m0s
                     description: |-
                       RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
                       specified as Golang Duration strings.
                       Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
-                      Example values: "1h", "2h30m", "10s"
-                      May be set to zero to fetch and create it once. Defaults to 1h.
+                      Example values: "1h0m0s", "2h30m0s", "10m0s"
+                      May be set to "0s" to fetch and create it once. Defaults to 1h0m0s.
                     type: string
                   refreshPolicy:
                     description: |-
@@ -1276,13 +1276,13 @@ spec:
                       type: object
                     type: array
                   refreshInterval:
-                    default: 1h
+                    default: 1h0m0s
                     description: |-
                       RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
                       specified as Golang Duration strings.
                       Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
-                      Example values: "1h", "2h30m", "10s"
-                      May be set to zero to fetch and create it once. Defaults to 1h.
+                      Example values: "1h0m0s", "2h30m0s", "10m0s"
+                      May be set to "0s" to fetch and create it once. Defaults to 1h0m0s.
                     type: string
                   refreshPolicy:
                     description: |-

config/crds/bases/external-secrets.io_clusterpushsecrets.yaml

@@ -182,7 +182,7 @@ spec:
                     - None
                     type: string
                   refreshInterval:
-                    default: 1h
+                    default: 1h0m0s
                     description: The Interval to which External Secrets will try to
                       push a secret definition
                     type: string

config/crds/bases/external-secrets.io_externalsecrets.yaml

@@ -439,13 +439,13 @@ spec:
                   type: object
                 type: array
               refreshInterval:
-                default: 1h
+                default: 1h0m0s
                 description: |-
                   RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
                   specified as Golang Duration strings.
                   Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
-                  Example values: "1h", "2h30m", "10s"
-                  May be set to zero to fetch and create it once. Defaults to 1h.
+                  Example values: "1h0m0s", "2h30m0s", "10m0s"
+                  May be set to "0s" to fetch and create it once. Defaults to 1h0m0s.
                 type: string
               refreshPolicy:
                 description: |-
@@ -1122,13 +1122,13 @@ spec:
                   type: object
                 type: array
               refreshInterval:
-                default: 1h
+                default: 1h0m0s
                 description: |-
                   RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
                   specified as Golang Duration strings.
                   Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
-                  Example values: "1h", "2h30m", "10s"
-                  May be set to zero to fetch and create it once. Defaults to 1h.
+                  Example values: "1h0m0s", "2h30m0s", "10m0s"
+                  May be set to "0s" to fetch and create it once. Defaults to 1h0m0s.
                 type: string
               refreshPolicy:
                 description: |-

config/crds/bases/external-secrets.io_pushsecrets.yaml

@@ -104,7 +104,7 @@ spec:
                 - None
                 type: string
               refreshInterval:
-                default: 1h
+                default: 1h0m0s
                 description: The Interval to which External Secrets will try to push
                   a secret definition
                 type: string

deploy/crds/bundle.yaml

@@ -433,13 +433,13 @@ spec:
                         type: object
                       type: array
                     refreshInterval:
-                      default: 1h
+                      default: 1h0m0s
                       description: |-
                         RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
                         specified as Golang Duration strings.
                         Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
-                        Example values: "1h", "2h30m", "10s"
-                        May be set to zero to fetch and create it once. Defaults to 1h.
+                        Example values: "1h0m0s", "2h30m0s", "10m0s"
+                        May be set to "0s" to fetch and create it once. Defaults to 1h0m0s.
                       type: string
                     refreshPolicy:
                       description: |-
@@ -1193,13 +1193,13 @@ spec:
                         type: object
                       type: array
                     refreshInterval:
-                      default: 1h
+                      default: 1h0m0s
                       description: |-
                         RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
                         specified as Golang Duration strings.
                         Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
-                        Example values: "1h", "2h30m", "10s"
-                        May be set to zero to fetch and create it once. Defaults to 1h.
+                        Example values: "1h0m0s", "2h30m0s", "10m0s"
+                        May be set to "0s" to fetch and create it once. Defaults to 1h0m0s.
                       type: string
                     refreshPolicy:
                       description: |-
@@ -1730,7 +1730,7 @@ spec:
                         - None
                       type: string
                     refreshInterval:
-                      default: 1h
+                      default: 1h0m0s
                       description: The Interval to which External Secrets will try to push a secret definition
                       type: string
                     secretStoreRefs:
@@ -12179,13 +12179,13 @@ spec:
                     type: object
                   type: array
                 refreshInterval:
-                  default: 1h
+                  default: 1h0m0s
                   description: |-
                     RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
                     specified as Golang Duration strings.
                     Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
-                    Example values: "1h", "2h30m", "10s"
-                    May be set to zero to fetch and create it once. Defaults to 1h.
+                    Example values: "1h0m0s", "2h30m0s", "10m0s"
+                    May be set to "0s" to fetch and create it once. Defaults to 1h0m0s.
                   type: string
                 refreshPolicy:
                   description: |-
@@ -12824,13 +12824,13 @@ spec:
                     type: object
                   type: array
                 refreshInterval:
-                  default: 1h
+                  default: 1h0m0s
                   description: |-
                     RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
                     specified as Golang Duration strings.
                     Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
-                    Example values: "1h", "2h30m", "10s"
-                    May be set to zero to fetch and create it once. Defaults to 1h.
+                    Example values: "1h0m0s", "2h30m0s", "10m0s"
+                    May be set to "0s" to fetch and create it once. Defaults to 1h0m0s.
                   type: string
                 refreshPolicy:
                   description: |-
@@ -13186,7 +13186,7 @@ spec:
                     - None
                   type: string
                 refreshInterval:
-                  default: 1h
+                  default: 1h0m0s
                   description: The Interval to which External Secrets will try to push a secret definition
                   type: string
                 secretStoreRefs:

design/004-datafrom-key-rewrite.md

@@ -51,7 +51,7 @@ metadata:
   name: sample
   namespace: default
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   target:
    name: foobar
   secretStoreRef:

docs/api/externalsecret.md

@@ -50,7 +50,7 @@ metadata:
   name: example
 spec:
   refreshPolicy: Periodic
-  refreshInterval: 1h  # Update every hour
+  refreshInterval: 1h0m0s  # Update every hour
   # other fields...
 ```
 

docs/api/spec.md

@@ -3556,8 +3556,8 @@ Kubernetes meta/v1.Duration
 <p>RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
 specified as Golang Duration strings.
 Valid time units are &ldquo;ns&rdquo;, &ldquo;us&rdquo; (or &ldquo;µs&rdquo;), &ldquo;ms&rdquo;, &ldquo;s&rdquo;, &ldquo;m&rdquo;, &ldquo;h&rdquo;
-Example values: &ldquo;1h&rdquo;, &ldquo;2h30m&rdquo;, &ldquo;10s&rdquo;
-May be set to zero to fetch and create it once. Defaults to 1h.</p>
+Example values: &ldquo;1h0m0s&rdquo;, &ldquo;2h30m0s&rdquo;, &ldquo;10m0s&rdquo;
+May be set to &ldquo;0s&rdquo; to fetch and create it once. Defaults to 1h0m0s.</p>
 </td>
 </tr>
 <tr>
@@ -4535,8 +4535,8 @@ Kubernetes meta/v1.Duration
 <p>RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
 specified as Golang Duration strings.
 Valid time units are &ldquo;ns&rdquo;, &ldquo;us&rdquo; (or &ldquo;µs&rdquo;), &ldquo;ms&rdquo;, &ldquo;s&rdquo;, &ldquo;m&rdquo;, &ldquo;h&rdquo;
-Example values: &ldquo;1h&rdquo;, &ldquo;2h30m&rdquo;, &ldquo;10s&rdquo;
-May be set to zero to fetch and create it once. Defaults to 1h.</p>
+Example values: &ldquo;1h0m0s&rdquo;, &ldquo;2h30m0s&rdquo;, &ldquo;10m0s&rdquo;
+May be set to &ldquo;0s&rdquo; to fetch and create it once. Defaults to 1h0m0s.</p>
 </td>
 </tr>
 <tr>
@@ -16709,8 +16709,8 @@ Kubernetes meta/v1.Duration
 <p>RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
 specified as Golang Duration strings.
 Valid time units are &ldquo;ns&rdquo;, &ldquo;us&rdquo; (or &ldquo;µs&rdquo;), &ldquo;ms&rdquo;, &ldquo;s&rdquo;, &ldquo;m&rdquo;, &ldquo;h&rdquo;
-Example values: &ldquo;1h&rdquo;, &ldquo;2h30m&rdquo;, &ldquo;10s&rdquo;
-May be set to zero to fetch and create it once. Defaults to 1h.</p>
+Example values: &ldquo;1h0m0s&rdquo;, &ldquo;2h30m0s&rdquo;, &ldquo;10m0s&rdquo;
+May be set to &ldquo;0s&rdquo; to fetch and create it once. Defaults to 1h0m0s.</p>
 </td>
 </tr>
 <tr>
@@ -17515,8 +17515,8 @@ Kubernetes meta/v1.Duration
 <p>RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
 specified as Golang Duration strings.
 Valid time units are &ldquo;ns&rdquo;, &ldquo;us&rdquo; (or &ldquo;µs&rdquo;), &ldquo;ms&rdquo;, &ldquo;s&rdquo;, &ldquo;m&rdquo;, &ldquo;h&rdquo;
-Example values: &ldquo;1h&rdquo;, &ldquo;2h30m&rdquo;, &ldquo;10s&rdquo;
-May be set to zero to fetch and create it once. Defaults to 1h.</p>
+Example values: &ldquo;1h0m0s&rdquo;, &ldquo;2h30m0s&rdquo;, &ldquo;10m0s&rdquo;
+May be set to &ldquo;0s&rdquo; to fetch and create it once. Defaults to 1h0m0s.</p>
 </td>
 </tr>
 <tr>

docs/guides/common-k8s-secret-types.md

@@ -44,7 +44,7 @@ kind: ExternalSecret
 metadata:
   name: dk-cfg-example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: example
     kind: SecretStore

docs/provider/alibaba.md

@@ -90,7 +90,7 @@ kind: ExternalSecret
 metadata:
   name: example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: secretstore-sample
     kind: SecretStore

docs/provider/aws-secrets-manager.md

@@ -250,7 +250,7 @@ kind: ExternalSecret
 metadata:
   name: versioned-api-key
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: aws-secretsmanager
     kind: SecretStore
@@ -276,7 +276,7 @@ kind: ExternalSecret
 metadata:
   name: versioned-api-key
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: aws-secretsmanager
     kind: SecretStore

docs/provider/bitwarden-secrets-manager.md

@@ -72,7 +72,7 @@ kind: ExternalSecret
 metadata:
   name: bitwarden
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     # This name must match the metadata.name in the `SecretStore`
     name: bitwarden-secretsmanager
@@ -98,7 +98,7 @@ kind: ExternalSecret
 metadata:
   name: bitwarden
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     # This name must match the metadata.name in the `SecretStore`
     name: bitwarden-secretsmanager
@@ -156,7 +156,7 @@ kind: PushSecret
 metadata:
   name: pushsecret-bitwarden # Customisable
 spec:
-  refreshInterval: 1h # Refresh interval for which push secret will reconcile
+  refreshInterval: 1h0m0s # Refresh interval for which push secret will reconcile
   secretStoreRefs: # A list of secret stores to push secrets to
     - name: bitwarden-secretsmanager
       kind: SecretStore

docs/provider/chef.md

@@ -97,7 +97,7 @@ metadata:
   labels:
     app.kubernetes.io/name: external-secrets
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: vivid-clustersecretstore # name of ClusterSecretStore
     kind: ClusterSecretStore

docs/provider/delinea.md

@@ -47,7 +47,7 @@ kind: ExternalSecret
 metadata:
     name: secret
 spec:
-    refreshInterval: 1h
+    refreshInterval: 1h0m0s
     secretStoreRef:
         kind: SecretStore
         name: secret-store

docs/provider/device42.md

@@ -45,7 +45,7 @@ kind: ExternalSecret
 metadata:
   name: device42-external-secret
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     kind: SecretStore
     name: device42-secret-store

docs/provider/fortanix.md

@@ -32,7 +32,7 @@ kind: ExternalSecret
 metadata:
   name: secret
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     kind: SecretStore
     name: secret-store
@@ -47,7 +47,7 @@ kind: ExternalSecret
 metadata:
   name: secret-from-property
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     kind: SecretStore
     name: secret-store
@@ -63,7 +63,7 @@ kind: ExternalSecret
 metadata:
   name: secret-from-extract
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     kind: SecretStore
     name: secret-store

docs/provider/google-secrets-manager.md

@@ -280,7 +280,7 @@ metadata:
 spec:
   updatePolicy: Replace
   deletionPolicy: None
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRefs:
     - name: gcp-secretstore
       kind: SecretStore

docs/provider/kubernetes.md

@@ -14,7 +14,7 @@ kind: ExternalSecret
 metadata:
   name: database-credentials
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     kind: SecretStore
     name: k8s-store             # name of the SecretStore (or kind specified)
@@ -63,7 +63,7 @@ kind: ExternalSecret
 metadata:
   name: fetch-tls-and-nginx
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     kind: SecretStore
     name: k8s-store
@@ -362,7 +362,7 @@ kind: PushSecret
 metadata:
   name: example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRefs:
     - name: k8s-store-remote-ns
       kind: SecretStore
@@ -413,7 +413,7 @@ kind: PushSecret
 metadata:
   name: example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRefs:
     - name: k8s-store-remote-ns
       kind: SecretStore

docs/provider/previder.md

@@ -50,7 +50,7 @@ kind: ExternalSecret
 metadata:
   name: example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: previder-secretstore-sample
     kind: SecretStore

docs/provider/pulumi.md

@@ -65,7 +65,7 @@ kind: ExternalSecret
 metadata:
   name: secret
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     kind: SecretStore
     name: secret-store
@@ -111,7 +111,7 @@ kind: PushSecret
 metadata:
   name: push-secret-example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   selector:
     secret:
       name: <NAME_OF_KUBE_SECRET>

docs/provider/scaleway.md

@@ -38,7 +38,7 @@ kind: ExternalSecret
 metadata:
     name: secret
 spec:
-    refreshInterval: 1h
+    refreshInterval: 1h0m0s
     secretStoreRef:
         kind: SecretStore
         name: secret-store
@@ -70,7 +70,7 @@ kind: ExternalSecret
 metadata:
   name: extract-data
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     kind: SecretStore
     name: secret-store

docs/provider/secretserver.md

@@ -56,7 +56,7 @@ kind: ExternalSecret
 metadata:
     name: secret-server-external-secret
 spec:
-    refreshInterval: 1h
+    refreshInterval: 1h0m0s
     secretStoreRef:
         kind: SecretStore
         name: secret-server-store
@@ -81,7 +81,7 @@ kind: ExternalSecret
 metadata:
     name: secret-server-external-secret
 spec:
-    refreshInterval: 1h
+    refreshInterval: 1h0m0s
     secretStoreRef:
       kind: SecretStore
       name: secret-server-store

docs/provider/webhook.md

@@ -101,7 +101,7 @@ kind: PushSecret
 metadata:
   name: pushsecret-example # Customisable
 spec:
-  refreshInterval: 1h # Refresh interval for which push secret will reconcile
+  refreshInterval: 1h0m0s # Refresh interval for which push secret will reconcile
   secretStoreRefs: # A list of secret stores to push secrets to
     - name: webhook-backend
       kind: SecretStore

docs/provider/yandex-certificate-manager.md

@@ -71,7 +71,7 @@ kind: ExternalSecret
 metadata:
   name: external-secret
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: secret-store
     kind: SecretStore

docs/provider/yandex-lockbox.md

@@ -74,7 +74,7 @@ kind: ExternalSecret
 metadata:
   name: external-secret
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: secret-store
     kind: SecretStore

docs/snippets/1password-push-secret.yaml

@@ -11,7 +11,7 @@ metadata:
   name: pushsecret-example # Customisable
 spec:
   deletionPolicy: Delete
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRefs:
     - name: 1password
       kind: ClusterSecretStore

docs/snippets/1passwordsdk-push-secret.yaml

@@ -5,7 +5,7 @@ metadata:
   name: pushsecret-example # Customisable
 spec:
   deletionPolicy: Delete
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRefs:
     - name: onepassword
       kind: SecretStore

docs/snippets/akeyless-external-secret-json.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: database-credentials
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
 
   secretStoreRef:
     kind: SecretStore

docs/snippets/akeyless-external-secret.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: database-credentials
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
 
   secretStoreRef:
     kind: SecretStore

docs/snippets/akeyless-push-secret.yaml

@@ -3,7 +3,7 @@ kind: PushSecret
 metadata:
  name: push-secret
 spec:
- refreshInterval: 1h
+ refreshInterval: 1h0m0s
  updatePolicy: Replace
  deletionPolicy: Delete
  secretStoreRefs:

docs/snippets/aws-anchore-engine-access-credentials-external-secret.yaml

@@ -5,7 +5,7 @@ metadata:
   name: anchore-access-credentials
   namespace: ci
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: cluster-secrets-store
     kind: ClusterSecretStore

docs/snippets/aws-jenkins-credential-github-ssh-external-secret.yaml

@@ -5,7 +5,7 @@ metadata:
   name: github-ssh-access
   namespace: ci
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: cluster-parameter-store
     kind: ClusterSecretStore

docs/snippets/aws-jenkins-credential-sonarqube-api-token-external-secret.yaml

@@ -5,7 +5,7 @@ metadata:
   name: sonarqube-api-token
   namespace: ci
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: cluster-secrets-store
     kind: ClusterSecretStore

docs/snippets/aws-jenkins-credentials-harbor-chart-robot-external-secret.yaml

@@ -5,7 +5,7 @@ metadata:
   name: harbor-chart-robot
   namespace: ci
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: cluster-secrets-store
     kind: ClusterSecretStore

docs/snippets/aws-pm-push-secret-with-metadata.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: default # Same of the SecretStores
 spec:
   deletionPolicy: Delete # the provider' secret will be deleted if the PushSecret is deleted
-  refreshInterval: 1h # Refresh interval for which push secret will reconcile
+  refreshInterval: 1h0m0s # Refresh interval for which push secret will reconcile
   secretStoreRefs: # A list of secret stores to push secrets to
     - name: aws-parameterstore
       kind: SecretStore

docs/snippets/aws-sm-external-secret.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: aws-secretsmanager
     kind: SecretStore

docs/snippets/aws-sm-push-secret-with-metadata.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: teamb # Same of the SecretStores
 spec:
   deletionPolicy: Delete
-  refreshInterval: 1h # Refresh interval for which push secret will reconcile
+  refreshInterval: 1h0m0s # Refresh interval for which push secret will reconcile
   secretStoreRefs: # A list of secret stores to push secrets to
     - name: teamb-secret-store
       kind: SecretStore

docs/snippets/azkv-datafrom-external-secret.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: all-secrets
 spec:
-  refreshInterval: 1h           # rate ESO pulls Azure Key Vault
+  refreshInterval: 1h0m0s           # rate ESO pulls Azure Key Vault
   secretStoreRef:
     kind: SecretStore
     name: azure-store           # name of the SecretStore (or kind specified)

docs/snippets/azkv-external-secret.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: database-credentials
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     kind: SecretStore
     name: azure-store

docs/snippets/azkv-pkcs12-cert-external-secret.yaml

@@ -4,7 +4,7 @@ kind: ExternalSecret
 metadata:
   name: tls-client-credentials
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     kind: SecretStore
     name: azure-store

docs/snippets/azkv-pushsecret-certificate.yaml

@@ -21,7 +21,7 @@ metadata:
   name: pushsecret-example
   namespace: default
 spec:
-  refreshInterval: 1h # Refresh interval for which push secret will reconcile
+  refreshInterval: 1h0m0s # Refresh interval for which push secret will reconcile
   deletionPolicy: Delete
   secretStoreRefs: # A list of secret stores to push secrets to
     - name: azure-store

docs/snippets/azkv-pushsecret-key.yaml

@@ -11,7 +11,7 @@ metadata:
   name: pushsecret-example
   namespace: default
 spec:
-  refreshInterval: 1h # Refresh interval for which push secret will reconcile
+  refreshInterval: 1h0m0s # Refresh interval for which push secret will reconcile
   deletionPolicy: Delete
   secretStoreRefs: # A list of secret stores to push secrets to
     - name: azure-store

docs/snippets/azkv-pushsecret-secret.yaml

@@ -11,7 +11,7 @@ metadata:
   name: pushsecret-example
   namespace: default
 spec:
-  refreshInterval: 1h # Refresh interval for which push secret will reconcile
+  refreshInterval: 1h0m0s # Refresh interval for which push secret will reconcile
   deletionPolicy: Delete
   secretStoreRefs: # A list of secret stores to push secrets to
     - name: azure-store

docs/snippets/basic-external-secret.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: secretstore-sample
     kind: SecretStore

docs/snippets/beyondtrust-external-secret.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
  name: beyondtrust-external-secret
 spec:
- refreshInterval: 1h
+ refreshInterval: 1h0m0s
  secretStoreRef:
    kind: SecretStore
    name: secretstore-beyondtrust

docs/snippets/beyondtrust-push-secret.yaml

@@ -3,7 +3,7 @@ kind: PushSecret
 metadata:
   name: pushsecret-beyondtrust
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRefs:
     - name: beyondtrust-store
       kind: ClusterSecretStore

docs/snippets/chef-external-secret.yaml

@@ -10,7 +10,7 @@ metadata:
   labels:
     app.kubernetes.io/name: external-secrets
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: vivid-clustersecretstore # name of ClusterSecretStore
     kind: ClusterSecretStore

docs/snippets/conjur-external-secret-find.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: conjur-find-by-name
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     # This name must match the metadata.name in the `SecretStore`
     name: conjur

docs/snippets/conjur-external-secret.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: conjur
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     # This name must match the metadata.name in the `SecretStore`
     name: conjur

docs/snippets/datafrom-rewrite-conflict.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     kind: SecretStore
     name: backend

docs/snippets/datafrom-rewrite-invalid-characters.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     kind: SecretStore
     name: backend

docs/snippets/datafrom-rewrite-merge-empty.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: merge-basic-example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: vault-backend
     kind: SecretStore

docs/snippets/datafrom-rewrite-remove-path.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     kind: SecretStore
     name: backend

docs/snippets/device42-external-secret.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: device42-find-by-id
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     # This name must match the metadata.name in the `SecretStore`
     name: device42

docs/snippets/fake-provider-es.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: fake
     kind: ClusterSecretStore

docs/snippets/full-cluster-push-secret.yaml

@@ -33,7 +33,7 @@ spec:
   pushSecretSpec:
     updatePolicy: Replace # Policy to overwrite existing secrets in the provider on sync
     deletionPolicy: Delete # the provider' secret will be deleted if the PushSecret is deleted
-    refreshInterval: 1h # Refresh interval for which push secret will reconcile
+    refreshInterval: 1h0m0s # Refresh interval for which push secret will reconcile
     secretStoreRefs: # A list of secret stores to push secrets to
       - name: aws-parameterstore
         kind: SecretStore
@@ -53,7 +53,7 @@ spec:
         # If the key source secret key has dashes, then it cannot be accessed directly,
         # and the "index" function should be used.
         best-pokemon: "{{ index . \"best-pokemon-src\" | toString | upper }} is the really best!"
-      # Also, it's possible to use an existing template from configmap where Secret is fetched, 
+      # Also, it's possible to use an existing template from configmap where Secret is fetched,
       # merged and templated within the referenced configMap data.
       # It does not update the configmap, it creates a secret with: data["config.yml"] = ...result...
       templateFrom:

docs/snippets/full-pushsecret-no-key-no-property.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: default # Same of the SecretStores
 spec:
   deletionPolicy: Delete # the provider' secret will be deleted if the PushSecret is deleted
-  refreshInterval: 1h # Refresh interval for which push secret will reconcile
+  refreshInterval: 1h0m0s # Refresh interval for which push secret will reconcile
   secretStoreRefs: # A list of secret stores to push secrets to
     - name: aws-parameterstore
       kind: SecretStore

docs/snippets/full-pushsecret-no-key-with-property.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: default # Same of the SecretStores
 spec:
   deletionPolicy: Delete # the provider' secret will be deleted if the PushSecret is deleted
-  refreshInterval: 1h # Refresh interval for which push secret will reconcile
+  refreshInterval: 1h0m0s # Refresh interval for which push secret will reconcile
   secretStoreRefs: # A list of secret stores to push secrets to
     - name: aws-parameterstore
       kind: SecretStore

docs/snippets/full-pushsecret.yaml

@@ -16,7 +16,7 @@ metadata:
 spec:
   updatePolicy: Replace # Policy to overwrite existing secrets in the provider on sync
   deletionPolicy: Delete # the provider' secret will be deleted if the PushSecret is deleted
-  refreshInterval: 1h # Refresh interval for which push secret will reconcile
+  refreshInterval: 1h0m0s # Refresh interval for which push secret will reconcile
   secretStoreRefs: # A list of secret stores to push secrets to
     - name: aws-parameterstore
       kind: SecretStore
@@ -36,7 +36,7 @@ spec:
       # If the key source secret key has dashes, then it cannot be accessed directly,
       # and the "index" function should be used.
       best-pokemon: "{{ index . \"best-pokemon-src\" | toString | upper }} is the really best!"
-    # Also, it's possible to use an existing template from configmap where Secret is fetched, 
+    # Also, it's possible to use an existing template from configmap where Secret is fetched,
     # merged and templated within the referenced configMap data.
     # It does not update the configmap, it creates a secret with: data["config.yml"] = ...result...
     templateFrom:

docs/snippets/gcpsm-data-from-external-secret.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: example
 spec:
-  refreshInterval: 1h           # rate SecretManager pulls GCPSM
+  refreshInterval: 1h0m0s           # rate SecretManager pulls GCPSM
   secretStoreRef:
     kind: SecretStore
     name: example               # name of the SecretStore (or kind specified)

docs/snippets/gcpsm-docker-config-externalsecret.yaml

@@ -4,7 +4,7 @@ kind: ExternalSecret
 metadata:
   name: dk-cfg-example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: example
     kind: SecretStore

docs/snippets/gcpsm-docker-config-helm-externalsecret.yaml

@@ -4,7 +4,7 @@ kind: ExternalSecret
 metadata:
   name: dk-cfg-example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: example
     kind: SecretStore

docs/snippets/gcpsm-external-secret.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: database-credentials
 spec:
-  refreshInterval: 1h             # rate SecretManager pulls GCPSM
+  refreshInterval: 1h0m0s             # rate SecretManager pulls GCPSM
   secretStoreRef:
     kind: SecretStore
     name: gcp-store               # name of the SecretStore (or kind specified)

docs/snippets/gcpsm-ssh-auth-externalsecret.yaml

@@ -4,7 +4,7 @@ kind: ExternalSecret
 metadata:
   name: ssh-auth-example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: example
     kind: SecretStore

docs/snippets/gcpsm-tls-externalsecret.yaml

@@ -4,7 +4,7 @@ kind: ExternalSecret
 metadata:
   name: template-tls-example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: example
     kind: SecretStore

docs/snippets/gcpsm-wif-externalsecret.yaml

@@ -4,7 +4,7 @@ metadata:
   name: demo-external-secret
   namespace: demo
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: demo-store
     kind: SecretStore

docs/snippets/generator-acr-argocd-helm-repo.yaml

@@ -21,7 +21,7 @@ spec:
           apiVersion: generators.external-secrets.io/v1alpha1
           kind: ACRAccessToken
           name: azurecr
-  refreshInterval: 3h
+  refreshInterval: 30h0s
   target:
     name: azurecr-credentials
     template:

docs/snippets/generator-acr-example.yaml

@@ -11,7 +11,7 @@ spec:
           apiVersion: generators.external-secrets.io/v1alpha1
           kind: ACRAccessToken
           name: my-azurecr
-  refreshInterval: 3h
+  refreshInterval: 30h0s
   target:
     name: azurecr-credentials
     template:

docs/snippets/generator-cloudsmith-example.yaml

@@ -11,7 +11,7 @@ spec:
           apiVersion: generators.external-secrets.io/v1alpha1
           kind: CloudsmithAccessToken
           name: my-cloudsmith-token
-  refreshInterval: 50m # Refresh before token expires
+  refreshInterval: 50m0s # Refresh before token expires
   target:
     name: cloudsmith-credentials
     template:
@@ -26,4 +26,4 @@ spec:
             }
           }
 
-{% endraw %}
+{% endraw %}

docs/snippets/generator-quay-example.yaml

@@ -11,7 +11,7 @@ spec:
           apiVersion: generators.external-secrets.io/v1alpha1
           kind: QuayAccessToken
           name: my-quay-token
-  refreshInterval: 55m # Tokens are good for 1 hour
+  refreshInterval: 55m0s # Tokens are good for 1 hour
   target:
     name: quay-credentials
     template:

docs/snippets/getallsecrets-find-by-name.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: find-by-tags
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: secretstore-sample
     kind: SecretStore

docs/snippets/getallsecrets-find-by-tags.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: find-by-tags
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: secretstore-sample
     kind: SecretStore

docs/snippets/github-push-secret.yaml

@@ -4,7 +4,7 @@ metadata:
   name: github-push-secret-example
 spec:
   deletionPolicy: Delete
-  refreshInterval: 10m # Refresh interval for which push secret will reconcile
+  refreshInterval: 10m0s # Refresh interval for which push secret will reconcile
   secretStoreRefs: # A list of secret stores to push secrets to
     - name: github # Must match SecretStore on the cluster
       kind: SecretStore

docs/snippets/gitlab-external-secret-json.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: gitlab-external-secret-example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
 
   secretStoreRef:
     kind: SecretStore

docs/snippets/gitlab-external-secret.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: gitlab-external-secret-example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
 
   secretStoreRef:
     kind: SecretStore

docs/snippets/ibm-external-secret-by-name.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: database-credentials
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: ibm-store
     kind: SecretStore

docs/snippets/ibm-external-secret.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: database-credentials
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: ibm-store
     kind: SecretStore

docs/snippets/keepersecurity-external-secret.yaml

@@ -4,7 +4,7 @@ kind: ExternalSecret
 metadata:
   name: example
 spec:
-  refreshInterval: 1h           # rate SecretManager pulls KeeperSecurity
+  refreshInterval: 1h0m0s           # rate SecretManager pulls KeeperSecurity
   secretStoreRef:
     kind: SecretStore
     name: example               # name of the SecretStore (or kind specified)
@@ -21,7 +21,7 @@ metadata:
   name: regcred
   namespace: external-secrets
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: keeper
     kind: ClusterSecretStore
@@ -49,7 +49,7 @@ metadata:
   name: config
   namespace: external-secrets
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: keeper
     kind: ClusterSecretStore
@@ -76,7 +76,7 @@ kind: ExternalSecret
 metadata:
   name: example
 spec:
-  refreshInterval: 1h           # rate SecretManager pulls KeeperSecurity
+  refreshInterval: 1h0m0s           # rate SecretManager pulls KeeperSecurity
   secretStoreRef:
     kind: SecretStore
     name: example               # name of the SecretStore (or kind specified)

docs/snippets/manifest-advanced-path.yaml

@@ -4,7 +4,7 @@ kind: ExternalSecret
 metadata:
   name: custom-resource-config
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: vault-backend
     kind: SecretStore

docs/snippets/manifest-argocd-app.yaml

@@ -4,7 +4,7 @@ kind: ExternalSecret
 metadata:
   name: argocd-app
 spec:
-  refreshInterval: 15m
+  refreshInterval: 15m0s
   secretStoreRef:
     name: vault-backend
     kind: SecretStore

docs/snippets/manifest-basic-configmap.yaml

@@ -4,7 +4,7 @@ kind: ExternalSecret
 metadata:
   name: application-config
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: vault-backend
     kind: SecretStore

docs/snippets/manifest-labeled-configmap.yaml

@@ -4,7 +4,7 @@ kind: ExternalSecret
 metadata:
   name: labeled-config
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: vault-backend
     kind: SecretStore

docs/snippets/manifest-templated-configmap.yaml

@@ -4,7 +4,7 @@ kind: ExternalSecret
 metadata:
   name: templated-config
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: vault-backend
     kind: SecretStore

docs/snippets/multiline-template-v1-external-secret.yaml

@@ -4,7 +4,7 @@ kind: ExternalSecret
 metadata:
   name: template
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: secretstore-sample
     kind: SecretStore

docs/snippets/ngrok-push-secret-with-metadata.yaml

@@ -4,7 +4,7 @@ metadata:
   name: ngrok-push-secret-example
 spec:
   deletionPolicy: Delete
-  refreshInterval: 10m # Refresh interval for which push secret will reconcile
+  refreshInterval: 10m0s # Refresh interval for which push secret will reconcile
   secretStoreRefs: # A list of secret stores to push secrets to
     - name: ngrok # Must match SecretStore on the cluster
       kind: SecretStore

docs/snippets/ngrok-push-secret.yaml

@@ -4,7 +4,7 @@ metadata:
   name: ngrok-push-secret-example
 spec:
   deletionPolicy: Delete
-  refreshInterval: 10m # Refresh interval for which push secret will reconcile
+  refreshInterval: 10m0s # Refresh interval for which push secret will reconcile
   secretStoreRefs: # A list of secret stores to push secrets to
     - name: ngrok # Must match SecretStore on the cluster
       kind: SecretStore

docs/snippets/onboardbase-fetch-all-secrets.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: service-name-secrets
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: onboardbase-external-secret-store
     kind: SecretStore

docs/snippets/onboardbase-fetch-secret.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: service-name-secrets
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: onboardbase-external-secret-store
     kind: SecretStore

docs/snippets/onboardbase-filtered-secrets.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: service-name-secrets
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: onboardbase-external-secret-store
     kind: SecretStore

docs/snippets/passworddepot-external-secret-json.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: passworddepot-external-secret-example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
 
   secretStoreRef:
     kind: SecretStore

docs/snippets/passworddepot-external-secret.yaml

@@ -3,7 +3,7 @@ kind: ExternalSecret
 metadata:
   name: passworddepot-external-secret-example
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
 
   secretStoreRef:
     kind: SecretStore

docs/snippets/pkcs12-template-v1-external-secret.yaml

@@ -4,7 +4,7 @@ kind: ExternalSecret
 metadata:
   name: template
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: secretstore-sample
     kind: SecretStore

docs/snippets/pushsecret-generator-rotation-example.yaml

@@ -16,7 +16,7 @@ kind: PushSecret
 metadata:
   name: pushsecret-example
 spec:
-  refreshInterval: 6h
+  refreshInterval: 6h0m0s
   secretStoreRefs:
     - name: aws-parameter-store
       kind: SecretStore

docs/snippets/vault-anchore-engine-access-credentials-external-secret.yaml

@@ -5,7 +5,7 @@ metadata:
   name: anchore-access-credentials
   namespace: security
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: vault-backend
     kind: ClusterSecretStore

docs/snippets/vault-jenkins-credential-github-ssh-access-external-secret.yaml

@@ -5,7 +5,7 @@ metadata:
   name: github-ssh-access
   namespace: ci
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: vault-backend
     kind: ClusterSecretStore

docs/snippets/vault-jenkins-credential-harbor-chart-robot-external-secret.yaml

@@ -5,7 +5,7 @@ metadata:
   name: harbor-chart-robot
   namespace: ci
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: vault-backend
     kind: ClusterSecretStore

docs/snippets/vault-jenkins-credential-sonarqube-api-token-external-secret.yaml

@@ -5,7 +5,7 @@ metadata:
   name: sonarqube-api-token
   namespace: ci
 spec:
-  refreshInterval: 1h
+  refreshInterval: 1h0m0s
   secretStoreRef:
     name: vault-backend
     kind: ClusterSecretStore