core-deployments/thanos/secret-generator.yaml

---
apiVersion: viaduct.ai/v1
kind: ksops
metadata:
  name: secret-generator
  annotations:
    config.kubernetes.io/function: |
      exec:
        path: ksops      
files:
  - ./2-objectstore-secret.enc.yaml