apiVersion: viaduct.ai/v1 kind: ksops metadata: name: authelia-secret-generator annotations: config.kubernetes.io/function: | exec: path: ksops secretFrom: - metadata: name: authelia-users-secret namespace: auth annotations: kustomize.config.k8s.io/needs-hash: "false" type: Opaque files: - users_database.yaml=./users_database.enc.yaml