apiVersion: external-secrets.io/v1 kind: SecretStore metadata: name: demo-store namespace: demo spec: provider: gcpsm: auth: secretRef: secretAccessKeySecretRef: name: gcp-sa-secret key: secret-access-credentials projectID: [PROJECT_ID]