apiVersion: external-secrets.io/v1 kind: SecretStore metadata: name: azure-store spec: provider: azurekv: authType: ManagedIdentity # Optionally set the ID of the Managed Identity, if multiple identities are assigned to External Secrets Operator. identityId: "00000000-0000-0000-0000-000000000000" # URL of your Key Vault instance, see: https://docs.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates vaultUrl: "https://my-keyvault-name.vault.azure.net"