From e6caf352cb6da17195245ede6ad5c83b4eab658e Mon Sep 17 00:00:00 2001
From: Ubuntu <nick@vm-management-200.stabify.de>
Date: Mon, 12 Jan 2026 01:14:03 +0000
Subject: [PATCH] 	modified:  
 infrastructure/cert-manager/external-secret.yaml

---
 .../cert-manager/external-secret.yaml         | 32 +++++++++++--------
 1 file changed, 18 insertions(+), 14 deletions(-)

diff --git a/infrastructure/cert-manager/external-secret.yaml b/infrastructure/cert-manager/external-secret.yaml
index 48682e3..ef31460 100644
--- a/infrastructure/cert-manager/external-secret.yaml
+++ b/infrastructure/cert-manager/external-secret.yaml
@@ -1,18 +1,22 @@
 apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
+kind: ClusterExternalSecret
 metadata:
-  name: cloudflare-api-token-secret
-  namespace: cert-manager
+  name: cloudflare-api-token-global
 spec:
+  externalSecretName: cloudflare-api-token-secret
+  namespaceSelector:
+    matchExpressions:
+    - key: kubernetes.io/metadata.name
+      operator: Exists # Verteile in alle Namespaces
   refreshInterval: "1h"
-  secretStoreRef:
-    name: vault-backend
-    kind: ClusterSecretStore
-  target:
-    name: cloudflare-api-token-secret
-    creationPolicy: Owner
-  data:
-  - secretKey: api-token
-    remoteRef:
-      key: secret/infrastructure/cloudflare
-      property: api_token
+  externalSecretSpec:
+    secretStoreRef:
+      name: vault-backend
+      kind: ClusterSecretStore
+    target:
+      creationPolicy: Owner
+    data:
+    - secretKey: api-token
+      remoteRef:
+        key: secret/infrastructure/cloudflare
+        property: api_token