helm-external-secrets/docs/snippets/pushsecret-generator-rotation-example.yaml

{% raw %}
apiVersion: generators.external-secrets.io/v1alpha1
kind: Password
metadata:
  name: strong-password
spec:
  length: 128
  digits: 5
  symbols: 5
  symbolCharacters: "-_$@"
  noUpper: false
  allowRepeat: true
---
apiVersion: external-secrets.io/v1alpha1
kind: PushSecret
metadata:
  name: pushsecret-example
spec:
  refreshInterval: 6h
  secretStoreRefs:
    - name: aws-parameter-store
      kind: SecretStore
  selector:
    generatorRef:
      apiVersion: generators.external-secrets.io/v1alpha1
      kind: Password
      name: strong-password
  data:
    - match:
        secretKey: password # property in the generator output
        remoteRef:
          remoteKey: prod/myql/password
{% endraw %}