--- # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: external-dns spec: secretStoreRef: kind: ClusterSecretStore name: onepassword-connect target: name: external-dns-cloudflare-secret template: engineVersion: v2 data: CF_API_TOKEN: "{{ .CLOUDFLARE_TOKEN }}" dataFrom: - extract: key: cloudflare