apiVersion: viaduct.ai/v1
kind: ksops
metadata:
  name: authelia-secret-generator
  annotations:
    config.kubernetes.io/function: |
        exec:
          path: ksops
secretFrom:
- metadata:
    name: traefik-cf-secret
    namespace: kube-system
    annotations:
      kustomize.config.k8s.io/needs-hash: "false"
  envs:
  - ./secret.enc.env