apiVersion: secrets.phase.dev/v1alpha1
kind: PhaseSecret
metadata:
  name: cloudflare-api-key-phase-secret
  namespace: cert-manager
spec:
  phaseApp: 'cert-manager' # The name of your Phase application
  phaseAppEnv: 'production' # OPTIONAL - The Phase App Environment to fetch secrets from
  phaseAppEnvPath: '/' # OPTIONAL Path within the Phase application environment to fetch secrets from
  phaseHost: 'https://phase.hnrx.net' # OPTIONAL - URL of a Phase Console instance
  authentication:
    serviceToken:
      serviceTokenSecretReference:
        secretName: 'phase-service-token' # Name of the Phase Service Token with access to your application
        secretNamespace: 'default'
  managedSecretReferences:
    - secretName: 'cloudflare-api-key' # Name of the Kubernetes managed secret that Phase will sync
      secretNamespace: 'cert-manager'