helm-external-secrets/docs/snippets/infisical-fetch-secret.yaml

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: infisical-managed-secrets
spec:
  secretStoreRef:
    kind: SecretStore
    name: infisical

  target:
    name: auth-api

  data:
    # When referencing a secret within the `secretsPath`, the `key` can just be a secret
    # name.
    - secretKey: API_KEY
      remoteRef:
        key: API_KEY
    # Properties can be extracted from secrets that are JSON strings.
    - secretKey: JSON_KEY
      remoteRef:
        key: JSON_BLOB
        property: key
    # When referencing secrets in paths (other than `secretsPath`), the `key` must be an
    # absolute path to the secret.
    - secretKey: PASSWORD
      remoteRef:
        key: /my-app/SERVICE_PASSWORD