apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: cloudflare-api-token namespace: cert-manager labels: app.kubernetes.io/name: cert-manager/templates/external-secret.yaml app.kubernetes.io/instance: cert-manager app.kubernetes.io/part-of: cert-manager spec: secretStoreRef: kind: ClusterSecretStore name: openbao data: - secretKey: api-token remoteRef: key: /cloudflare/alexlebens.net/cl01tl-issuer-certificate property: token