kubernetes/k8s-peterg/external-secrets-operator/clustersecrets.yaml

---
apiVersion: external-secrets.io/v1
kind: ClusterExternalSecret
metadata:
  name: tls-wildcard-peterg-nl
spec:
  externalSecretName: tls-wildcard-peterg-nl
  namespaceSelectors:
    - matchLabels:
        kubernetes.io/metadata.name: kube-system
  externalSecretSpec:
    secretStoreRef:
      name: vault-wheatley
      kind: ClusterSecretStore
    target:
      name: tls-wildcard-peterg-nl
      template:
        type: kubernetes.io/tls
        data:
          tls.crt: "{{ .crt }}"
          tls.key: "{{ .key }}"
    data:
      - secretKey: crt
        remoteRef:
          key: secrets/provisioned/tls-wildcard-peterg-nl
          property: crt
      - secretKey: key
        remoteRef:
          key: secrets/provisioned/tls-wildcard-peterg-nl
          property: key