apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata: {name: peers, namespace: short}
spec:
  vaultAuthRef: short
  type: kv-v2
  mount: secret
  path: short/peers
  refreshAfter: 10s
  destination:
    create: true
    overwrite: true
    name: peers
    transformation:
      excludeRaw: true
      excludes: [.*]
      templates:
        config: {text: '{{ get .Secrets "config" }}'}