apiVersion: external-secrets.io/v1beta1
kind: ClusterSecretStore
metadata:
  name: infisical-litellm
spec:
  provider:
    infisical:
      hostAPI: https://app.infisical.com
      auth:
        universalAuthCredentials:
          clientId:
            key: clientId
            namespace: platform-security
            name: infisical-universal-auth
          clientSecret:
            key: clientSecret
            namespace: platform-security
            name: infisical-universal-auth
      secretsScope:
        projectSlug: agentic-os
        environmentSlug: prod
        secretsPath: "/agentic-os/litellm"