metada:
   secretPushFormat: string

      metadata:
        apiVersion: kubernetes.external-secrets.io/v1alpha1
        kind: PushSecretMetadata
        spec:
          secretPushFormat: string # When not set, default to binary 

apiVersion: external-secrets.io/v1beta1
kind: SecretStore
metadata:
  name: secretstore-sample-ik
spec:
  provider:
    aws:
      service: SecretsManager
      region: eu-west-1
      secretsManager:
        forceDeleteWithoutRecovery: true
      auth:
        secretRef:
          accessKeyIDSecretRef:
            name: awssm-secret
            key: access-key
          secretAccessKeySecretRef:
            name: awssm-secret
            key: secret-access-key
---
apiVersion: generators.external-secrets.io/v1alpha1
kind: Password
metadata:
  name: my-password
  namespace: external-secrets
spec:
  length: 12
  digits: 5
  symbols: 5
  symbolCharacters: "-_$@"
  noUpper: false
  allowRepeat: true
---
apiVersion: external-secrets.io/v1alpha1
kind: PushSecret
metadata:
  name: pushsecret-to-aws-example # Customisable
  namespace: external-secrets # Same of the SecretStores
  labels:
    this-is-the-label: "lol"
  annotations:
    this-is-the-annotation: "haha"
spec:
  deletionPolicy: Delete
  refreshInterval: 1m # Refresh interval for which push secret will reconcile
  secretStoreRefs: # A list of secret stores to push secrets to
    - name: secretstore-sample-ik
      kind: SecretStore
  selector:
    generatorRef:
      apiVersion: generators.external-secrets.io/v1alpha1
      kind: Password
      name: my-password
  template:
    metadata:
      annotations:
        a-key2: value1
      labels:
        l-key2: value1
        pp.kubernetes.io/part-of: testing
  data:
    - conversionStrategy: None
      match:
        secretKey: password # Source Kubernetes secret key to be pushed
        remoteRef:
          remoteKey: teamb-my-first-parameter-6 # Remote reference (where the secret is going to be pushed)
      metadata:
        apiVersion: kubernetes.external-secrets.io/v1alpha1
        kind: PushSecretMetadata
        spec:
          kmsKeyID: bb123123-b2b0-4f60-ac3a-44a13f0e6b6c
          secretPushFormat: string
          description: "this is key description"
          tags: # Tags to be added to the secret in Azure Key Vault
            secret-store: teamb-secret-store
            refresh-interval: 1h