apiVersion: secrets.hashicorp.com/v1beta1 kind: VaultStaticSecret metadata: name: ts-mcp-secrets namespace: ts-mcp spec: type: kv-v2 mount: kv path: ts-mcp/ts-mcp-secrets destination: name: ts-mcp-secrets create: true refreshAfter: 30s vaultAuthRef: vault-auth