secretgen-controller provides CRDs to specify what secrets must be on the cluster (generated or not). Supports:
- Generating certificates, passwords, RSA keys and SSH keys.
- Generating secrets from data residing in other Kubernetes resources.
More: https://github.com/carvel-dev/secretgen-controller
Post #938
485