kubernetes/k8s-wheatley/external-secrets-operator/clustersecrets.yaml

---
apiVersion: external-secrets.io/v1
kind: ClusterExternalSecret
metadata:
  name: tls-wildcard-wheatley-in
spec:
  externalSecretName: tls-wildcard-wheatley-in
  namespaceSelectors:
    - matchLabels:
        kubernetes.io/metadata.name: kube-system
  externalSecretSpec:
    secretStoreRef:
      name: vault-wheatley
      kind: ClusterSecretStore
    target:
      name: tls-wildcard-wheatley-in
      template:
        type: kubernetes.io/tls
        data:
          tls.crt: "{{ .crt }}"
          tls.key: "{{ .key }}"
    data:
      - secretKey: crt
        remoteRef:
          key: secrets/provisioned/tls-wildcard-wheatley-in
          property: crt
          conversionStrategy: Default
          decodingStrategy: None
          metadataPolicy: None
          nullBytePolicy: Ignore
      - secretKey: key
        remoteRef:
          key: secrets/provisioned/tls-wildcard-wheatley-in
          property: key
          conversionStrategy: Default
          decodingStrategy: None
          metadataPolicy: None
          nullBytePolicy: Ignore