nameReference:
  - kind: Secret
    fieldSpecs:
      - kind: Issuer
        path: spec/acme/solvers/dns01/cloudflare/apiTokenSecretRef/name