diff --git a/external-secrets/templates/secret-store.yaml b/external-secrets/templates/secret-store.yaml
index 22f821b..f763045 100644
--- a/external-secrets/templates/secret-store.yaml
+++ b/external-secrets/templates/secret-store.yaml
@@ -12,3 +12,22 @@ spec:
         tokenSecretRef:
           name: "vault-token"
           key: "token"
+
+---
+
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: cloudflare-api-token-secret
+spec:
+  secretStoreRef:
+    name: vault
+    kind: ClusterSecretStore
+  target:
+    name: cloudflare-api-token-secret
+  data:
+  - secretKey: cloudflare-api-token-secret
+    remoteRef:
+      key: secrets/cert-manager
+      property: cloudflare-api-token-secret
+