helm-external-secrets/docs/snippets/namespace-permitted-annotation.yaml

apiVersion: v1
kind: Namespace
metadata:
  name: team-a
  annotations:
    # annotation that defines which keys can be read
    # the annotation value is a regular expression
    external-secrets.io/permitted-key-name: "a/development/*"