apiVersion: external-secrets.io/v1beta1
kind: ClusterExternalSecret
metadata:
  name: cloudflare-api-token-global
spec:
  externalSecretName: cloudflare-api-token-secret
  namespaceSelector:
    matchExpressions:
    - key: kubernetes.io/metadata.name
      operator: Exists # Verteile in alle Namespaces
  refreshInterval: "1h"
  externalSecretSpec:
    secretStoreRef:
      name: vault-backend
      kind: ClusterSecretStore
    target:
      creationPolicy: Owner
    data:
    - secretKey: api-token
      remoteRef:
        key: secret/infrastructure/cloudflare
        property: api_token