kubernetes/k8s-peterg/external-secrets-operator/clustersecrets.yaml

---
apiVersion: external-secrets.io/v1
kind: ClusterExternalSecret
metadata:
  name: tls-wildcard-peterg-nl
spec:
  externalSecretName: tls-wildcard-peterg-nl
  namespaceSelectors:
    - matchLabels:
        kubernetes.io/metadata.name: kube-system
  externalSecretSpec:
    secretStoreRef:
      name: 1password-wheatley
      kind: ClusterSecretStore
    target:
      name: tls-wildcard-peterg-nl
      template:
        type: kubernetes.io/tls
        data:
          tls.crt: "{{ .crt }}"
          tls.key: "{{ .key }}"
    data:
      - secretKey: key
        remoteRef:
          key: tls-wildcard-peterg-nl/key
          metadataPolicy: None
          conversionStrategy: Default
          decodingStrategy: None
      - secretKey: crt
        remoteRef:
          key: tls-wildcard-peterg-nl/crt
          metadataPolicy: None
          conversionStrategy: Default
          decodingStrategy: None