use bw secret in cloudflared

argocd/infra/cloudflared/cloudflared.yaml

@@ -84,3 +84,26 @@ data:
       path: api/badge
       service: http://argocd-server.argocd.svc.cluster.local:80
     - service: http_status:404
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: tunnel-credentials
+  namespace: kube-system
+spec:
+  target:
+    name: tunnel-credentials
+    deletionPolicy: Delete
+    template:
+      type: Opaque
+      data:
+        credentials.json: |-
+          {{ .credentials }}
+  data:
+    - secretKey: credentials
+      sourceRef:
+        storeRef:
+          name: bitwarden-notes
+          kind: ClusterSecretStore
+      remoteRef:
+        key: 4a0b91df-6fcb-4dc1-a0b7-b3f800730cc1