update

infra/cert-manager/templates/secretvault.yaml

@@ -6,7 +6,6 @@ spec:
   secretStoreRef:
     name: vault
     kind: ClusterSecretStore
-    namespace: vault
   target:
     name: cloudflare-api-token-secret
   data:

infra/vault/templates/secret-store.yaml

@@ -14,3 +14,26 @@ spec:
           role: "VaultSecretStore"
           serviceAccountRef:
             name: "vault"
+
+--- 
+
+apiVersion: external-secrets.io/v1alpha1
+kind: SecretStore
+metadata:
+  name: vault-backend
+  namespace: example
+spec:
+  provider:
+    vault:
+      server: "https://vault.vault.svc.cluster.local:8200"
+      path: "secret"
+      version: "v2"
+      auth:
+        kubernetes:
+          mountPath: "kubernetes"
+          role: "demo"
+          serviceAccountRef:
+            name: "my-sa"
+          secretRef:
+            name: "my-secret"
+            key: "vault"