apiVersion: viaduct.ai/v1
kind: ksops
metadata:
  name: ksops-generator
  annotations:
    config.kubernetes.io/function: |
      exec:
        path: ksops
secretFrom:
  - metadata:
      name: sync-secret
    type: Opaque
    binaryFiles:
      - cert.pem=./cert.sops.pem
      - key.pem=./key.sops.pem