apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: tunnel-credentials
  namespace: cloudflare
spec:
  destination:
    create: true
    name: tunnel-credentials
  mount: kv
  path: cloudflare/tunnel-credentials
  refreshAfter: 30s
  type: kv-v2
  vaultAuthRef: vault