Force ExternalSecret refresh

Trigger immediate re-sync by updating annotation

kubectl annotate externalsecret mysecret force-sync=$(date +%s) --overwrite

More external-secrets commands

Check ExternalSecret sync status

kubectl get externalsecret mysecret -o jsonpath='{.status.conditions[*]}'

View sync conditions: Ready, SecretSynced
ExternalSecret with templating

kubectl get externalsecret mysecret -o yaml | grep -A10 'template:'

Inspect value templating in ExternalSecret spec
List all ExternalSecrets

kubectl get externalsecrets -A -o custom-columns='NS:.metadata.namespace,NAME:.metadata.name,STORE:.spec.secretStoreRef.name,READY:.status.conditions[0].status'

Compact table of all ExternalSecrets with sync state
Describe ExternalSecret

kubectl describe externalsecret <name> -n <ns>

Show sync status, last sync time, and error message if failed
List all ExternalSecrets

kubectl get externalsecret -A

See all ESO ExternalSecrets and their Ready status