diff --git a/infrastructure/cert-manager/external-secret.yaml b/infrastructure/cert-manager/external-secret.yaml index ef31460..48682e3 100644 --- a/infrastructure/cert-manager/external-secret.yaml +++ b/infrastructure/cert-manager/external-secret.yaml @@ -1,22 +1,18 @@ apiVersion: external-secrets.io/v1beta1 -kind: ClusterExternalSecret +kind: ExternalSecret metadata: - name: cloudflare-api-token-global + name: cloudflare-api-token-secret + namespace: cert-manager spec: - externalSecretName: cloudflare-api-token-secret - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: Exists # Verteile in alle Namespaces refreshInterval: "1h" - externalSecretSpec: - secretStoreRef: - name: vault-backend - kind: ClusterSecretStore - target: - creationPolicy: Owner - data: - - secretKey: api-token - remoteRef: - key: secret/infrastructure/cloudflare - property: api_token + secretStoreRef: + name: vault-backend + kind: ClusterSecretStore + target: + name: cloudflare-api-token-secret + creationPolicy: Owner + data: + - secretKey: api-token + remoteRef: + key: secret/infrastructure/cloudflare + property: api_token