apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

# Disable hash suffix for all generated secrets (stable names)
generatorOptions:
  disableNameSuffixHash: true

# SOPS-encrypted secrets via ksops generator
generators:
  - secret-generator.yaml