> See the "ValueFrom" section of our configuration documentation

... this is what we have today, how do I know what value to patch in from, like what is the name of the secret?

Looking at that link makes me think this is like another layer of helm on helm, especially with the same go template values in yaml that are going to be fed into helm templates under the hood.

Putting more yaml on top of templated yaml is not the way to create the next package manager for k8s.