ExternalSecret to create Docker Hub- or any other imagePullSecret from AWS Secret Manager

es-docker-hub.yaml

apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: es-docker-hub-token
spec:
  data:
  - remoteRef:
      key: /eks/docker-hub-token
    secretKey: token
  refreshInterval: 1h
  secretStoreRef:
    kind: ClusterSecretStore
    name: test
  target:
    name: docker-hub-token
    template:
      data:
        .dockerconfigjson: '{{ .token | toString }}'
      engineVersion: v2
      type: kubernetes.io/dockerconfigjson

First, generate a base64 encoded string from your username and password or token combination:

echo -n <username>:<password|token> | base64

Then, create a secret in AWS Secret Manager in the following format:

{
    "auths": {
        "https://index.docker.io/v1/": {
            "auth": "<base64-content>"
        }
    }
}

If you're configuring the secret for another container registry than Docker Hub, make sure to modify the URL in the json above.