Files
gitops/infrastructure/cert-manager/external-secret.yaml

23 lines
596 B
YAML

apiVersion: external-secrets.io/v1beta1
kind: ClusterExternalSecret
metadata:
name: cloudflare-api-token-global
spec:
externalSecretName: cloudflare-api-token-secret
namespaceSelector:
matchExpressions:
- key: kubernetes.io/metadata.name
operator: Exists # Verteile in alle Namespaces
refreshInterval: "1h"
externalSecretSpec:
secretStoreRef:
name: vault-backend
kind: ClusterSecretStore
target:
creationPolicy: Owner
data:
- secretKey: api-token
remoteRef:
key: secret/infrastructure/cloudflare
property: api_token