helm-external-secrets/docs/snippets/conjur-secret-store-jwt-service-account-ref.yaml

apiVersion: external-secrets.io/v1beta1
kind: SecretStore
metadata:
  name: conjur
spec:
  provider:
    conjur:
      # Service URL
      url: https://myapi.conjur.org
      # [OPTIONAL] base64 encoded string of certificate
      caBundle: OPTIONALxFIELDxxxBase64xCertxString==
      auth:
        jwt:
          # conjur account
          account: conjur
          serviceID: my-jwt-auth-service # The authn-jwt service ID
          serviceAccountRef: # Service account to retrieve JWT token for
            name: my-service-account
            audiences:  # [OPTIONAL] audiences to include in JWT token
              - https://conjur.company.com