helm-external-secrets/docs/snippets/1password-secret-store.yaml

---
apiVersion: external-secrets.io/v1
kind: SecretStore
metadata:
  name: staging
spec:
  provider:
    onepassword:
      connectHost: https://onepassword-connect-staging:8080
      vaults:
        staging: 1  # look in this vault first
        shared: 2   # next look in here. error if not found
      auth:
        secretRef:
          connectTokenSecretRef:
            name: onepassword-connect-token-staging
            key: token