diff --git a/.circleci/config.yml b/.circleci/config.yml
index 20bf6bc5..486d0dd4 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -17,15 +17,15 @@ jobs:
       image: ubuntu-2004:202111-02
     environment: &versions
       # https://github.com/kubernetes/kubernetes/releases
-      KUBECTL_VERSION: v1.23.1
+      KUBECTL_VERSION: v1.23.3
       # https://hub.docker.com/r/rancher/k3s/tags
-      K3S_VERSION: v1.22.5-k3s1
+      K3S_VERSION: v1.23.3-k3s1
       # https://github.com/rancher/k3d/releases
       K3D_VERSION: v4.4.8
       # https://github.com/helm/helm/releases
       HELM_VERSION: v3.8.1
       # https://golang.org/dl/
-      GOLANG_VERSION: "1.17.8"
+      GOLANG_VERSION: "1.18"
       # https://github.com/kubernetes-sigs/kubebuilder/releases
       KUBEBUILDER_VERSION: 3.3.0
       # https://github.com/mozilla/sops/releases
@@ -41,7 +41,7 @@ jobs:
       # https://github.com/git-chglog/git-chglog/releases
       GIT_CHGLOG_VERSION: 0.15.1
       # https://github.com/docker/buildx/releases
-      BUILDX_BINARY_VERSION: 0.8.0
+      BUILDX_BINARY_VERSION: 0.8.1
 
       DOCKER_BUILDKIT: 1
       BUILDX_PLATFORMS: linux/amd64,linux/arm64
@@ -235,27 +235,17 @@ jobs:
             kubectl describe node k3d-operator-server-0
             kubectl describe node k3d-operator-agent-0
       - run:
-          name: make test
+          name: Unit tests and envtest integration tests
           command: |
             make test
-      # run helm tests
+      # helm tests
       - run:
           name: Test helm charts
           command: |
             make test-helm
+      # k3d integration tests
       - run:
-          name: Docker build
-          command: |
-            make docker-login
-            make docker-cross-build
-          no_output_timeout: 1h
-      - save_cache:
-          key: v2-modules-{{ .Branch }}-{{ checksum "go.sum" }}
-          paths:
-            - "/home/circleci/gogo/pkg"
-      # tests start here
-      - run:
-          name: Run Local Tests
+          name: In cluster integration tests
           command: |
             export GNUPGHOME="$(mktemp -d)"
             cat >$GNUPGHOME/foo <<EOF
@@ -346,6 +336,16 @@ jobs:
               exit 1
             fi
             rm -fr $GNUPGHOME
+      - run:
+          name: Docker build
+          command: |
+            make docker-login
+            make docker-cross-build
+          no_output_timeout: 1h
+      - save_cache:
+          key: v2-modules-{{ .Branch }}-{{ checksum "go.sum" }}
+          paths:
+            - "/home/circleci/gogo/pkg"
 
 workflows:
   version: 2
diff --git a/.tool-versions b/.tool-versions
index 1d7ca58c..c6be57ea 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -2,7 +2,7 @@
 # https://github.com/kubernetes-sigs/kubebuilder/releases
 kubebuilder 3.3.0
 # https://golang.org/dl/
-golang 1.17.8
+golang 1.18
 # https://github.com/mozilla/sops/releases
 sops 3.7.2
 # https://github.com/kubernetes-sigs/kustomize/releases
@@ -10,7 +10,7 @@ kustomize 4.5.2
 # https://github.com/rancher/k3d/releases
 k3d 4.4.8
 # https://github.com/kubernetes/kubernetes/releases
-kubectl 1.23.1
+kubectl 1.23.3
 # https://github.com/helm/helm/releases
 helm 3.8.1
 # https://github.com/norwoodj/helm-docs/releases
diff --git a/Dockerfile b/Dockerfile
index 4b1be44f..6bb4a347 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@
 # Build the manager binary
 # https://www.debian.org/releases/
 # https://hub.docker.com/_/golang?tab=tags&page=1&ordering=last_updated
-FROM golang:1.17.8-bullseye as builder
+FROM golang:1.18-bullseye as builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests
@@ -22,7 +22,7 @@ RUN CGO_ENABLED=0 GO111MODULE=on go build -a -o manager main.go
 
 # https://wiki.ubuntu.com/Releases
 # https://hub.docker.com/_/ubuntu?tab=tags&page=1&ordering=last_updated
-FROM ubuntu:focal-20220302
+FROM ubuntu:focal-20220316
 
 RUN apt-get -y update \
       && apt-get -y upgrade \
diff --git a/Makefile b/Makefile
index 8f9880fa..bece2856 100644
--- a/Makefile
+++ b/Makefile
@@ -1,6 +1,6 @@
 # UPDATE_HERE
 GO := GOPROXY=https://proxy.golang.org go
-SOPS_SEC_OPERATOR_VERSION := 0.4.5
+SOPS_SEC_OPERATOR_VERSION := 0.4.6
 
 # https://github.com/kubernetes-sigs/controller-tools/releases
 CONTROLLER_GEN_VERSION := "v0.8.0"
@@ -12,7 +12,7 @@ KUSTOMIZE_VERSION := "v4.5.2"
 # until fixed, can't use newer version, see:
 #   https://github.com/kubernetes-sigs/controller-runtime/issues/1571
 # ENVTEST_K8S_VERSION refers to the version of kubebuilder assets to be downloaded by envtest binary.
-ENVTEST_K8S_VERSION := "1.22.1"
+ENVTEST_K8S_VERSION := "1.23.3"
 
 # Use existing cluster instead of starting processes
 USE_EXISTING_CLUSTER ?= true
@@ -221,7 +221,7 @@ controller-gen: ## Download controller-gen locally if necessary.
 KUSTOMIZE = $(shell pwd)/bin/kustomize
 .PHONY: kustomize
 kustomize: ## Download kustomize locally if necessary.
-	$(call go-get-tool,$(KUSTOMIZE),sigs.k8s.io/kustomize/kustomize/v4@${KUSTOMIZE_VERSION})
+	$(call go-install-tool,$(KUSTOMIZE),sigs.k8s.io/kustomize/kustomize/v4@${KUSTOMIZE_VERSION})
 
 ENVTEST = $(shell pwd)/bin/setup-envtest
 .PHONY: envtest
diff --git a/README.md b/README.md
index 2d6eec15..b2305fce 100644
--- a/README.md
+++ b/README.md
@@ -23,7 +23,7 @@ encrypted files stored in `git` repository.
 
 | Kubernetes | Sops | Chart | Operator |
 |---|---|---|---|
-| v1.23.x | v3.7.2 | 0.10.5 | 0.4.5 |
+| v1.23.x | v3.7.2 | 0.10.6 | 0.4.6 |
 | v1.22.x | v3.7.1 | 0.9.7 | 0.3.7 |
 | v1.21.x | v3.7.1 | 0.9.6 | 0.3.6 |
 
diff --git a/chart/helm3/sops-secrets-operator/Chart.yaml b/chart/helm3/sops-secrets-operator/Chart.yaml
index 7218c7b9..60565548 100644
--- a/chart/helm3/sops-secrets-operator/Chart.yaml
+++ b/chart/helm3/sops-secrets-operator/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 # UPDATE_HERE
-version: 0.10.5
-appVersion: 0.4.5
+version: 0.10.6
+appVersion: 0.4.6
 type: application
 description: Helm chart deploys sops-secrets-operator
 name: sops-secrets-operator
diff --git a/chart/helm3/sops-secrets-operator/Makefile b/chart/helm3/sops-secrets-operator/Makefile
index 62d804b2..b0480d5e 100644
--- a/chart/helm3/sops-secrets-operator/Makefile
+++ b/chart/helm3/sops-secrets-operator/Makefile
@@ -4,7 +4,7 @@ CHART_NAME?=$(shell cat Chart.yaml | awk 'BEGIN { FS=": " } $$0~/^name:/ { gsub(
 VERSION_TAG?=$(shell cat Chart.yaml | awk 'BEGIN { FS=": " } $$0~/^version/ { gsub(/['\'',]/, ""); print $$2; }')
 
 # UPDATE_HERE
-K8S_VERSION := "1.23.1"
+K8S_VERSION := "1.23.3"
 
 SHELL=/bin/bash
 
diff --git a/chart/helm3/sops-secrets-operator/README.md b/chart/helm3/sops-secrets-operator/README.md
index 1a6dde6b..df88ed41 100644
--- a/chart/helm3/sops-secrets-operator/README.md
+++ b/chart/helm3/sops-secrets-operator/README.md
@@ -132,11 +132,11 @@ The following table lists the configurable parameters of the Sops-secrets-operat
 | healthProbes.readiness | object | `{"initialDelaySeconds":5,"periodSeconds":10}` | Readiness probe configuration |
 | image.pullPolicy | string | `"Always"` | Operator image pull policy |
 | image.repository | string | `"isindir/sops-secrets-operator"` | Operator image name |
-| image.tag | string | `"0.4.5"` | Operator image tag |
+| image.tag | string | `"0.4.6"` | Operator image tag |
 | imagePullSecrets | list | `[]` | Secrets to pull image from private docker repository |
 | initImage.pullPolicy | string | `"Always"` | Init container image pull policy |
 | initImage.repository | string | `"ubuntu"` | Init container image name |
-| initImage.tag | string | `"focal-20220113"` | Init container image tag |
+| initImage.tag | string | `"focal-20220316"` | Init container image tag |
 | kubeconfig | object | `{"enabled":false,"path":null}` | Paths to a kubeconfig. Only required if out-of-cluster. |
 | logging | object | `{"encoder":"json","level":"info","stacktraceLevel":"error"}` | Logging configuration section suggested values Development Mode (encoder=consoleEncoder,logLevel=Debug,stackTraceLevel=Warn). Production Mode (encoder=jsonEncoder,logLevel=Info,stackTraceLevel=Error) (default) |
 | logging.encoder | string | `"json"` | Zap log encoding (one of 'json' or 'console') |
diff --git a/chart/helm3/sops-secrets-operator/tests/operator_test.yaml b/chart/helm3/sops-secrets-operator/tests/operator_test.yaml
index a4bfa6c7..a535b3fa 100644
--- a/chart/helm3/sops-secrets-operator/tests/operator_test.yaml
+++ b/chart/helm3/sops-secrets-operator/tests/operator_test.yaml
@@ -31,8 +31,8 @@ tests:
             app.kubernetes.io/instance: sops
             app.kubernetes.io/managed-by: Helm
             app.kubernetes.io/name: sops-secrets-operator
-            app.kubernetes.io/version: 0.4.5
-            helm.sh/chart: sops-secrets-operator-0.10.5
+            app.kubernetes.io/version: 0.4.6
+            helm.sh/chart: sops-secrets-operator-0.10.6
 
   # custom name
   - it: should correctly render custome name
@@ -171,7 +171,7 @@ tests:
       # UPDATE_HERE
       - equal:
           path: spec.template.spec.containers[0].image
-          value: isindir/sops-secrets-operator:0.4.5
+          value: isindir/sops-secrets-operator:0.4.6
       - equal:
           path: spec.template.spec.containers[0].imagePullPolicy
           value: Always
@@ -199,7 +199,7 @@ tests:
       - equal:
           path: spec.template.spec.initContainers[0].image
           # UPDATE_HERE
-          value: ubuntu:focal-20220113
+          value: ubuntu:focal-20220316
       - equal:
           path: spec.template.spec.initContainers[0].imagePullPolicy
           value: Always
diff --git a/chart/helm3/sops-secrets-operator/values.yaml b/chart/helm3/sops-secrets-operator/values.yaml
index 51dedc33..455761bc 100644
--- a/chart/helm3/sops-secrets-operator/values.yaml
+++ b/chart/helm3/sops-secrets-operator/values.yaml
@@ -13,7 +13,7 @@ image:
   # -- Operator image name
   repository: isindir/sops-secrets-operator
   # -- Operator image tag
-  tag: 0.4.5
+  tag: 0.4.6
   # -- Operator image pull policy
   pullPolicy: Always
 
@@ -22,7 +22,7 @@ initImage:
   # -- Init container image name
   repository: ubuntu
   # -- Init container image tag
-  tag: focal-20220113
+  tag: focal-20220316
   # -- Init container image pull policy
   pullPolicy: Always
 
diff --git a/controllers/sopssecret_controller.go b/controllers/sopssecret_controller.go
index bd641af9..f01889f7 100644
--- a/controllers/sopssecret_controller.go
+++ b/controllers/sopssecret_controller.go
@@ -58,195 +58,264 @@ func (r *SopsSecretReconciler) Reconcile(ctx context.Context, req ctrl.Request)
 
 	r.Log.Info("Reconciling", "sopssecret", req.NamespacedName)
 
-	instanceEncrypted := &isindirv1alpha3.SopsSecret{}
-	err := r.Get(ctx, req.NamespacedName, instanceEncrypted)
+	encryptedSopsSecret, finishReconcileLoop, err := r.getEncryptedSopsSecret(ctx, req)
+	if finishReconcileLoop {
+		return reconcile.Result{}, err
+	}
+
+	if r.isSecretSuspended(encryptedSopsSecret, req) {
+		return reconcile.Result{}, nil
+	}
+
+	plainTextSopsSecret, rescheduleReconcileLoop := r.decryptSopsSecret(encryptedSopsSecret)
+	if rescheduleReconcileLoop {
+		return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
+	}
+
+	// Iterate over secret templates
+	r.Log.Info("Entering template data loop", "sopssecret", req.NamespacedName)
+	for _, secretTemplate := range plainTextSopsSecret.Spec.SecretsTemplate {
+
+		kubeSecretFromTemplate, rescheduleReconcileLoop := r.newKubeSecretFromTemplate(req, encryptedSopsSecret, plainTextSopsSecret, &secretTemplate)
+		if rescheduleReconcileLoop {
+			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
+		}
+
+		kubeSecretInCluster, rescheduleReconcileLoop := r.getSecretFromClusterOrCreateFromTemplate(ctx, req, encryptedSopsSecret, kubeSecretFromTemplate)
+		if rescheduleReconcileLoop {
+			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
+		}
+
+		rescheduleReconcileLoop = r.isKubeSecretManagedOrAnnotatedToBeManaged(req, encryptedSopsSecret, kubeSecretInCluster)
+		if rescheduleReconcileLoop {
+			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
+		}
+
+		rescheduleReconcileLoop = r.refreshKubeSecretIfNeeded(ctx, req, encryptedSopsSecret, kubeSecretFromTemplate, kubeSecretInCluster)
+		if rescheduleReconcileLoop {
+			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
+		}
+	}
+
+	encryptedSopsSecret.Status.Message = "Healthy"
+	r.Status().Update(context.Background(), encryptedSopsSecret)
+
+	r.Log.Info("SopsSecret is Healthy", "sopssecret", req.NamespacedName)
+	return ctrl.Result{}, nil
+}
+
+func (r *SopsSecretReconciler) decryptSopsSecret(
+	encryptedSopsSecret *isindirv1alpha3.SopsSecret,
+) (*isindirv1alpha3.SopsSecret, bool) {
+	decryptedSopsSecret, err := decryptSopsSecretInstance(encryptedSopsSecret, r.Log)
 	if err != nil {
-		if errors.IsNotFound(err) {
-			// Request object not found, could have been deleted after reconcile request.
-			// Owned objects are automatically garbage collected. For additional cleanup logic use finalizers.
-			// Return and don't requeue
+		encryptedSopsSecret.Status.Message = "Decryption error"
+
+		// will not process plainTextSopsSecret error as we are already in error mode here
+		r.Status().Update(context.Background(), encryptedSopsSecret)
+
+		// Failed to decrypt, re-schedule reconciliation in 5 minutes
+		return nil, true
+	}
+	return decryptedSopsSecret, false
+}
+
+func (r *SopsSecretReconciler) isKubeSecretManagedOrAnnotatedToBeManaged(
+	req ctrl.Request,
+	encryptedSopsSecret *isindirv1alpha3.SopsSecret,
+	kubeSecretInCluster *corev1.Secret,
+) bool {
+	// kubeSecretFromTemplate found - perform ownership check
+	if !metav1.IsControlledBy(kubeSecretInCluster, encryptedSopsSecret) && !isAnnotatedToBeManaged(kubeSecretInCluster) {
+		encryptedSopsSecret.Status.Message = "Child secret is not owned by controller error"
+		r.Status().Update(context.Background(), encryptedSopsSecret)
+
+		r.Log.Info(
+			"Child secret is not owned by controller or sopssecret Error",
+			"sopssecret", req.NamespacedName,
+			"error", fmt.Errorf("sopssecret has a conflict with existing kubernetes secret resource, potential reasons: target secret already pre-existed or is managed by multiple sops secrets"),
+		)
+		return true
+	}
+	return false
+}
+
+func (r *SopsSecretReconciler) refreshKubeSecretIfNeeded(
+	ctx context.Context,
+	req ctrl.Request,
+	encryptedSopsSecret *isindirv1alpha3.SopsSecret,
+	kubeSecretFromTemplate *corev1.Secret,
+	kubeSecretInCluster *corev1.Secret,
+) bool {
+	copyOfKubeSecretInCluster := kubeSecretInCluster.DeepCopy()
+
+	copyOfKubeSecretInCluster.StringData = kubeSecretFromTemplate.StringData
+	copyOfKubeSecretInCluster.Data = map[string][]byte{}
+	copyOfKubeSecretInCluster.Type = kubeSecretFromTemplate.Type
+	copyOfKubeSecretInCluster.ObjectMeta.Annotations = kubeSecretFromTemplate.ObjectMeta.Annotations
+	copyOfKubeSecretInCluster.ObjectMeta.Labels = kubeSecretFromTemplate.ObjectMeta.Labels
+
+	if isAnnotatedToBeManaged(kubeSecretInCluster) {
+		copyOfKubeSecretInCluster.ObjectMeta.OwnerReferences = kubeSecretFromTemplate.ObjectMeta.OwnerReferences
+	}
+
+	if !apiequality.Semantic.DeepEqual(kubeSecretInCluster, copyOfKubeSecretInCluster) {
+		r.Log.Info(
+			"Secret already exists and needs to be refreshed",
+			"secret", copyOfKubeSecretInCluster.Name,
+			"namespace", copyOfKubeSecretInCluster.Namespace,
+		)
+		if err := r.Update(ctx, copyOfKubeSecretInCluster); err != nil {
+			encryptedSopsSecret.Status.Message = "Child secret update error"
+			r.Status().Update(context.Background(), encryptedSopsSecret)
+
 			r.Log.Info(
-				"Request object not found, could have been deleted after reconcile request",
-				"sopssecret",
-				req.NamespacedName,
+				"Child secret update error",
+				"sopssecret", req.NamespacedName,
+				"error", err,
 			)
-			return reconcile.Result{}, nil
+			return true
 		}
+		r.Log.Info(
+			"Secret successfully refreshed",
+			"secret", copyOfKubeSecretInCluster.Name,
+			"namespace", copyOfKubeSecretInCluster.Namespace,
+		)
+	}
+	return false
+}
 
-		// Error reading the object - requeue the request.
+func (r *SopsSecretReconciler) getSecretFromClusterOrCreateFromTemplate(
+	ctx context.Context,
+	req ctrl.Request,
+	encryptedSopsSecret *isindirv1alpha3.SopsSecret,
+	kubeSecretFromTemplate *corev1.Secret,
+) (*corev1.Secret, bool) {
+
+	// Check if kubeSecretFromTemplate already exists in the cluster store
+	kubeSecretToFindAndCompare := &corev1.Secret{}
+	err := r.Get(
+		ctx,
+		types.NamespacedName{
+			Name:      kubeSecretFromTemplate.Name,
+			Namespace: kubeSecretFromTemplate.Namespace,
+		},
+		kubeSecretToFindAndCompare,
+	)
+
+	// No kubeSecretFromTemplate alike found - CREATE one
+	if errors.IsNotFound(err) {
 		r.Log.Info(
-			"Error reading the object",
-			"sopssecret",
-			req.NamespacedName,
+			"Creating a new Secret",
+			"sopssecret", req.NamespacedName,
+			"message", err,
 		)
-		return reconcile.Result{}, err
+		err = r.Create(ctx, kubeSecretFromTemplate)
+		kubeSecretToFindAndCompare = kubeSecretFromTemplate.DeepCopy()
 	}
 
-	// Return early if the object is suspended.
-	if instanceEncrypted.Spec.Suspend {
+	// Unknown error while trying to find kubeSecretFromTemplate in cluster - reschedule reconciliation
+	if err != nil {
+		encryptedSopsSecret.Status.Message = "Unknown Error"
+		r.Status().Update(context.Background(), encryptedSopsSecret)
+
 		r.Log.Info(
-			"Reconciliation is suspended for this object",
-			"sopssecret",
-			req.NamespacedName,
+			"Unknown Error",
+			"sopssecret", req.NamespacedName,
+			"error", err,
 		)
+		return nil, true
+	}
 
-		instanceEncrypted.Status.Message = "Reconciliation is suspended"
-		r.Status().Update(context.Background(), instanceEncrypted)
+	return kubeSecretToFindAndCompare, false
+}
 
-		return reconcile.Result{}, nil
+func (r *SopsSecretReconciler) newKubeSecretFromTemplate(
+	req ctrl.Request,
+	encryptedSopsSecret *isindirv1alpha3.SopsSecret,
+	plainTextSopsSecret *isindirv1alpha3.SopsSecret,
+	secretTemplate *isindirv1alpha3.SopsSecretTemplate,
+) (*corev1.Secret, bool) {
+
+	// Define a new secret object
+	kubeSecretFromTemplate, err := createKubeSecretFromTemplate(plainTextSopsSecret, secretTemplate, r.Log)
+	if err != nil {
+		encryptedSopsSecret.Status.Message = "New child secret creation error"
+		r.Status().Update(context.Background(), encryptedSopsSecret)
+
+		r.Log.Info(
+			"New child secret creation error",
+			"sopssecret", req.NamespacedName,
+			"error", err,
+		)
+		return nil, true
 	}
 
-	instance, err := decryptSopsSecretInstance(instanceEncrypted, r.Log)
+	// Set encryptedSopsSecret as the owner of kubeSecret
+	err = controllerutil.SetControllerReference(encryptedSopsSecret, kubeSecretFromTemplate, r.Scheme)
 	if err != nil {
-		//instance.Status.SecretsTotal = len(instance.Spec.SecretsTemplate)
-		instanceEncrypted.Status.Message = "Decryption error"
+		encryptedSopsSecret.Status.Message = "Setting controller ownership of the child secret error"
+		r.Status().Update(context.Background(), encryptedSopsSecret)
 
-		// will not process instance error as we are already in error mode here
-		r.Status().Update(context.Background(), instanceEncrypted)
+		r.Log.Info(
+			"Setting controller ownership of the child secret error",
+			"sopssecret", req.NamespacedName,
+			"error", err,
+		)
 
-		// Failed to decrypt, re-schedule reconciliation in 5 minutes
-		return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
+		return nil, true
 	}
 
-	// iterating over secret templates
-	r.Log.Info("Entering template data loop", "sopssecret", req.NamespacedName)
-	for _, secretTemplateValue := range instance.Spec.SecretsTemplate {
-		// Define a new secret object
-		newSecret, err := newSecretForCR(instance, &secretTemplateValue, r.Log)
-		if err != nil {
-			instanceEncrypted.Status.Message = "New child secret creation error"
-			r.Status().Update(context.Background(), instanceEncrypted)
+	return kubeSecretFromTemplate, false
+}
 
-			r.Log.Info(
-				"New child secret creation error",
-				"sopssecret",
-				req.NamespacedName,
-				"error",
-				err,
-			)
-			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
-		}
+func (r *SopsSecretReconciler) isSecretSuspended(
+	encryptedSopsSecret *isindirv1alpha3.SopsSecret, req ctrl.Request) bool {
 
-		// Set SopsSecret instance as the owner and controller
-		if err := controllerutil.SetControllerReference(
-			instance,
-			newSecret,
-			r.Scheme,
-		); err != nil {
-			instanceEncrypted.Status.Message = "Setting controller ownership of the child secret error"
-			r.Status().Update(context.Background(), instanceEncrypted)
+	// Return early if SopsSecret object is suspended.
+	if encryptedSopsSecret.Spec.Suspend {
+		r.Log.Info(
+			"Reconciliation is suspended for this object",
+			"sopssecret", req.NamespacedName,
+		)
 
-			r.Log.Info(
-				"Setting controller ownership of the child secret error",
-				"sopssecret",
-				req.NamespacedName,
-				"error",
-				err,
-			)
-			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
-		}
+		encryptedSopsSecret.Status.Message = "Reconciliation is suspended"
+		r.Status().Update(context.Background(), encryptedSopsSecret)
 
-		// Check if this Secret already exists
-		foundSecret := &corev1.Secret{}
-		err = r.Get(
-			ctx,
-			types.NamespacedName{
-				Name:      newSecret.Name,
-				Namespace: newSecret.Namespace,
-			},
-			foundSecret,
-		)
-		if errors.IsNotFound(err) {
-			r.Log.Info(
-				"Creating a new Secret",
-				"sopssecret",
-				req.NamespacedName,
-				"message",
-				err,
-			)
-			err = r.Create(ctx, newSecret)
-			foundSecret = newSecret.DeepCopy()
-		}
-		if err != nil {
-			instanceEncrypted.Status.Message = "Unknown Error"
-			r.Status().Update(context.Background(), instanceEncrypted)
+		return true
+	}
 
-			r.Log.Info(
-				"Unknown Error",
-				"sopssecret",
-				req.NamespacedName,
-				"error",
-				err,
-			)
-			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
-		}
+	return false
+}
 
-		if !metav1.IsControlledBy(foundSecret, instance) && !isAnnotatedToBeManaged(foundSecret) {
-			instanceEncrypted.Status.Message = "Child secret is not owned by controller error"
-			r.Status().Update(context.Background(), instanceEncrypted)
+func (r *SopsSecretReconciler) getEncryptedSopsSecret(
+	ctx context.Context, req ctrl.Request) (*isindirv1alpha3.SopsSecret, bool, error) {
 
+	encryptedSopsSecret := &isindirv1alpha3.SopsSecret{}
+
+	err := r.Get(ctx, req.NamespacedName, encryptedSopsSecret)
+	if err != nil {
+		if errors.IsNotFound(err) {
+			// Request object not found, could have been deleted after reconcile request.
+			// Owned objects are automatically garbage collected. For additional cleanup logic use finalizers.
+			// Return and don't requeue
 			r.Log.Info(
-				"Child secret is not owned by controller or sopssecret Error",
+				"Request object not found, could have been deleted after reconcile request",
 				"sopssecret",
 				req.NamespacedName,
-				"error",
-				fmt.Errorf("sopssecret has a conflict with existing kubernetes secret resource, potential reasons: target secret already pre-existed or is managed by multiple sops secrets"),
 			)
-			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
+			return nil, true, nil
 		}
 
-		origSecret := foundSecret
-		foundSecret = foundSecret.DeepCopy()
-
-		foundSecret.StringData = newSecret.StringData
-		foundSecret.Data = map[string][]byte{}
-		foundSecret.Type = newSecret.Type
-		foundSecret.ObjectMeta.Annotations = newSecret.ObjectMeta.Annotations
-		foundSecret.ObjectMeta.Labels = newSecret.ObjectMeta.Labels
-		if isAnnotatedToBeManaged(origSecret) {
-			foundSecret.ObjectMeta.OwnerReferences = newSecret.ObjectMeta.OwnerReferences
-		}
-
-		if !apiequality.Semantic.DeepEqual(origSecret, foundSecret) {
-			r.Log.Info(
-				"Secret already exists and needs to be refreshed",
-				"secret",
-				foundSecret.Name,
-				"namespace",
-				foundSecret.Namespace,
-			)
-			if err = r.Update(ctx, foundSecret); err != nil {
-				instanceEncrypted.Status.Message = "Child secret update error"
-				r.Status().Update(context.Background(), instanceEncrypted)
-
-				r.Log.Info(
-					"Child secret update error",
-					"sopssecret",
-					req.NamespacedName,
-					"error",
-					err,
-				)
-				return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
-			}
-			r.Log.Info(
-				"Secret successfully refreshed",
-				"secret",
-				foundSecret.Name,
-				"namespace",
-				foundSecret.Namespace,
-			)
-		}
+		// Error reading the object - requeue the request.
+		r.Log.Info(
+			"Error reading the object",
+			"sopssecret",
+			req.NamespacedName,
+		)
+		return nil, true, err
 	}
-
-	instanceEncrypted.Status.Message = "Healthy"
-	r.Status().Update(context.Background(), instanceEncrypted)
-
-	r.Log.Info(
-		"SopsSecret is Healthy",
-		"sopssecret",
-		req.NamespacedName,
-	)
-	return ctrl.Result{}, nil
+	return encryptedSopsSecret, false, nil
 }
 
 // checks if the annotation equals to "true", and it's case sensitive
@@ -271,62 +340,36 @@ func (r *SopsSecretReconciler) SetupWithManager(mgr ctrl.Manager) error {
 		Complete(r)
 }
 
-// newSecretForCR returns a secret with the same namespace as the cr
-func newSecretForCR(
-	cr *isindirv1alpha3.SopsSecret,
-	secretTpl *isindirv1alpha3.SopsSecretTemplate,
-	reqLogger logr.Logger,
+// createKubeSecretFromTemplate returns new Kubernetes secret object, created from decrypted SopsSecret Template
+func createKubeSecretFromTemplate(
+	sopsSecret *isindirv1alpha3.SopsSecret,
+	sopsSecretTemplate *isindirv1alpha3.SopsSecretTemplate,
+	logger logr.Logger,
 ) (*corev1.Secret, error) {
-	labels := make(map[string]string)
-	for key, value := range secretTpl.Labels {
-		labels[key] = value
-	}
-
-	// Construct annotations for the secret
-	annotations := make(map[string]string)
-	for key, value := range secretTpl.Annotations {
-		annotations[key] = value
+	if sopsSecretTemplate.Name == "" {
+		return nil, fmt.Errorf("createKubeSecretFromTemplate(): secret template name must be specified and not empty string")
 	}
 
-	// Construct stringData for the secret
-	strData := make(map[string]string)
-	for key, value := range secretTpl.StringData {
-		strData[key] = value
-	}
-	// add data to stringData
-	for key, value := range secretTpl.Data {
-		decoded, err := base64.StdEncoding.DecodeString(value)
-		if err != nil {
-			return nil, fmt.Errorf("newSecretForCR(): data[%v] is not a valid base64 string", key)
-		}
-		strData[key] = string(decoded)
+	strData, err := cloneTemplateData(sopsSecretTemplate.StringData, sopsSecretTemplate.Data)
+	if err != nil {
+		return nil, err
 	}
 
-	if secretTpl.Name == "" {
-		return nil, fmt.Errorf("newSecretForCR(): secret template name must be specified and not empty string")
-	}
+	kubeSecretType := getSecretType(sopsSecretTemplate.Type)
+	labels := cloneMap(sopsSecretTemplate.Labels)
+	annotations := cloneMap(sopsSecretTemplate.Annotations)
 
-	reqLogger.Info("Processing", "sopssecret",
-		fmt.Sprintf(
-			"%s.%s.%s",
-			cr.Kind,
-			cr.APIVersion,
-			cr.Name,
-		),
-		"type",
-		secretTpl.Type,
-		"namespace", cr.Namespace,
-		"templateItem",
-		fmt.Sprintf("secret/%s", secretTpl.Name),
+	logger.Info("Processing",
+		"sopssecret", fmt.Sprintf("%s.%s.%s", sopsSecret.Kind, sopsSecret.APIVersion, sopsSecret.Name),
+		"type", sopsSecretTemplate.Type,
+		"namespace", sopsSecret.Namespace,
+		"templateItem", fmt.Sprintf("secret/%s", sopsSecretTemplate.Name),
 	)
 
-	kubeSecretType := getSecretType(secretTpl.Type)
-
-	// return resulting secret
 	secret := &corev1.Secret{
 		ObjectMeta: metav1.ObjectMeta{
-			Name:        secretTpl.Name,
-			Namespace:   cr.Namespace,
+			Name:        sopsSecretTemplate.Name,
+			Namespace:   sopsSecret.Namespace,
 			Labels:      labels,
 			Annotations: annotations,
 		},
@@ -336,77 +379,91 @@ func newSecretForCR(
 	return secret, nil
 }
 
-func getSecretType(paramType string) corev1.SecretType {
-	// by default secret type is Opaque
-	kubeSecretType := corev1.SecretTypeOpaque
-	if paramType == "kubernetes.io/service-account-token" {
-		kubeSecretType = corev1.SecretTypeServiceAccountToken
+func cloneMap(oldMap map[string]string) map[string]string {
+	newMap := make(map[string]string)
+
+	for key, value := range oldMap {
+		newMap[key] = value
 	}
-	if paramType == "kubernetes.io/dockercfg" {
-		kubeSecretType = corev1.SecretTypeDockercfg
+
+	return newMap
+}
+
+// add both StringData and Data to strData
+func cloneTemplateData(stringData map[string]string, data map[string]string) (map[string]string, error) {
+	strData := cloneMap(stringData)
+	for key, value := range data {
+		decoded, err := base64.StdEncoding.DecodeString(value)
+		if err != nil {
+			return nil, fmt.Errorf("createKubeSecretFromTemplate(): data[%v] is not a valid base64 string", key)
+		}
+		strData[key] = string(decoded)
 	}
-	if paramType == "kubernetes.io/dockerconfigjson" {
+	return strData, nil
+}
+
+func getSecretType(templateSecretType string) corev1.SecretType {
+	var kubeSecretType corev1.SecretType
+
+	switch templateSecretType {
+	case "kubernetes.io/service-account-token":
+		kubeSecretType = corev1.SecretTypeServiceAccountToken
+	case "kubernetes.io/dockercfg":
+		kubeSecretType = corev1.SecretTypeDockercfg
+	case "kubernetes.io/dockerconfigjson":
 		kubeSecretType = corev1.SecretTypeDockerConfigJson
-	}
-	if paramType == "kubernetes.io/basic-auth" {
+	case "kubernetes.io/basic-auth":
 		kubeSecretType = corev1.SecretTypeBasicAuth
-	}
-	if paramType == "kubernetes.io/ssh-auth" {
+	case "kubernetes.io/ssh-auth":
 		kubeSecretType = corev1.SecretTypeSSHAuth
-	}
-	if paramType == "kubernetes.io/tls" {
+	case "kubernetes.io/tls":
 		kubeSecretType = corev1.SecretTypeTLS
-	}
-	if paramType == "bootstrap.kubernetes.io/token" {
+	case "bootstrap.kubernetes.io/token":
 		kubeSecretType = corev1.SecretTypeBootstrapToken
+	default:
+		kubeSecretType = corev1.SecretTypeOpaque
 	}
+
 	return kubeSecretType
 }
 
 // decryptSopsSecretInstance decrypts spec.secretTemplates
 func decryptSopsSecretInstance(
-	instanceEncrypted *isindirv1alpha3.SopsSecret,
-	reqLogger logr.Logger,
+	encryptedSopsSecret *isindirv1alpha3.SopsSecret,
+	logger logr.Logger,
 ) (*isindirv1alpha3.SopsSecret, error) {
-	instance := &isindirv1alpha3.SopsSecret{}
-	reqBodyBytes, err := json.Marshal(instanceEncrypted)
+	sopsSecretAsBytes, err := json.Marshal(encryptedSopsSecret)
 	if err != nil {
-		reqLogger.Info(
+		logger.Info(
 			"Failed to convert encrypted sops secret to bytes[]",
-			"sopssecret",
-			fmt.Sprintf("%s/%s", instanceEncrypted.Namespace, instanceEncrypted.Name),
-			"error",
-			err,
+			"sopssecret", fmt.Sprintf("%s/%s", encryptedSopsSecret.Namespace, encryptedSopsSecret.Name),
+			"error", err,
 		)
 		return nil, err
 	}
 
-	decryptedInstanceBytes, err := customDecryptData(reqBodyBytes, "json")
+	decryptedSopsSecretAsBytes, err := customDecryptData(sopsSecretAsBytes, "json")
 	if err != nil {
-		reqLogger.Info(
-			"Failed to Decrypt encrypted sops secret instance",
-			"sopssecret",
-			fmt.Sprintf("%s/%s", instanceEncrypted.Namespace, instanceEncrypted.Name),
-			"error",
-			err,
+		logger.Info(
+			"Failed to Decrypt encrypted sops secret decryptedSopsSecret",
+			"sopssecret", fmt.Sprintf("%s/%s", encryptedSopsSecret.Namespace, encryptedSopsSecret.Name),
+			"error", err,
 		)
 		return nil, err
 	}
 
-	// Decrypted instance is empty structure here
-	err = json.Unmarshal(decryptedInstanceBytes, &instance)
+	decryptedSopsSecret := &isindirv1alpha3.SopsSecret{}
+	err = json.Unmarshal(decryptedSopsSecretAsBytes, &decryptedSopsSecret)
 	if err != nil {
-		reqLogger.Info(
-			"Failed to Unmarshal decrypted sops secret instance",
-			"sopssecret",
-			fmt.Sprintf("%s/%s", instanceEncrypted.Namespace, instanceEncrypted.Name),
-			"error",
-			err,
+		logger.Info(
+			"Failed to Unmarshal decrypted sops secret decryptedSopsSecret",
+			"sopssecret", fmt.Sprintf("%s/%s", encryptedSopsSecret.Namespace, encryptedSopsSecret.Name),
+			"error", err,
 		)
 		return nil, err
 	}
 
-	return instance, nil
+	return decryptedSopsSecret, nil
 }
 
 // Data is a helper that takes encrypted data and a format string,
@@ -418,6 +475,7 @@ func decryptSopsSecretInstance(
 func customDecryptData(data []byte, format string) (cleartext []byte, err error) {
 	// Initialize a Sops JSON store
 	var store sops.Store
+
 	switch format {
 	case "json":
 		store = &sopsjson.Store{}
@@ -428,6 +486,7 @@ func customDecryptData(data []byte, format string) (cleartext []byte, err error)
 	default:
 		store = &sopsjson.BinaryStore{}
 	}
+
 	// Load SOPS file and access the data key
 	tree, err := store.LoadEncryptedFile(data)
 	if err != nil {
diff --git a/docs/index.yaml b/docs/index.yaml
index be2ae589..4f4a3daf 100644
--- a/docs/index.yaml
+++ b/docs/index.yaml
@@ -1,9 +1,29 @@
 apiVersion: v1
 entries:
   sops-secrets-operator:
+  - apiVersion: v2
+    appVersion: 0.4.6
+    created: "2022-03-23T16:51:53.624145Z"
+    description: Helm chart deploys sops-secrets-operator
+    digest: 8e580ee17f943fa52a3bd06f9a7f2236b4b19dd6c85cfea6593a4fa18513ba52
+    keywords:
+    - gitops
+    - sops
+    - kms
+    - encryption
+    maintainers:
+    - email: isindir@users.sf.net
+      name: isindir
+    name: sops-secrets-operator
+    sources:
+    - https://github.com/isindir/sops-secrets-operator.git
+    type: application
+    urls:
+    - https://isindir.github.io/sops-secrets-operator/sops-secrets-operator-0.10.6.tgz
+    version: 0.10.6
   - apiVersion: v2
     appVersion: 0.4.5
-    created: "2022-03-11T12:19:27.139077Z"
+    created: "2022-03-23T16:51:53.623238Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 0e05931586ea4d2c81b6e00849addb8430e2923f70b2aed08bfd5a733dcf09d0
     keywords:
@@ -23,7 +43,7 @@ entries:
     version: 0.10.5
   - apiVersion: v2
     appVersion: 0.4.4
-    created: "2022-03-11T12:19:27.138071Z"
+    created: "2022-03-23T16:51:53.622336Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 606a826ae48759b4bb305a3fd3200342aa5b1bd1ab1afac9315f4a25a6184758
     keywords:
@@ -43,7 +63,7 @@ entries:
     version: 0.10.4
   - apiVersion: v2
     appVersion: 0.4.3
-    created: "2022-03-11T12:19:27.136591Z"
+    created: "2022-03-23T16:51:53.621462Z"
     description: Helm chart deploys sops-secrets-operator
     digest: b329233d4fccf2d5377e1988b6e1858e1c69786e79fb56ce0b0cf65439f3228b
     keywords:
@@ -63,7 +83,7 @@ entries:
     version: 0.10.3
   - apiVersion: v2
     appVersion: 0.4.2
-    created: "2022-03-11T12:19:27.134996Z"
+    created: "2022-03-23T16:51:53.620604Z"
     description: Helm chart deploys sops-secrets-operator
     digest: d4ab3300dee58d2661db327cf205e821158cdae1bff032c3511d58f3ed97802b
     keywords:
@@ -83,7 +103,7 @@ entries:
     version: 0.10.2
   - apiVersion: v2
     appVersion: 0.4.1
-    created: "2022-03-11T12:19:27.133649Z"
+    created: "2022-03-23T16:51:53.619728Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 7f7da6232c02453208b19d737d6b0fad795c3a0c7962efba092367f9827190a1
     keywords:
@@ -103,7 +123,7 @@ entries:
     version: 0.10.1
   - apiVersion: v2
     appVersion: 0.4.0
-    created: "2022-03-11T12:19:27.131616Z"
+    created: "2022-03-23T16:51:53.618756Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 35f3813680049bb629ad53be826418e524ca84845f690d4957fd8ee3533a4b32
     keywords:
@@ -123,7 +143,7 @@ entries:
     version: 0.10.0
   - apiVersion: v2
     appVersion: 0.3.7
-    created: "2022-03-11T12:19:27.194436Z"
+    created: "2022-03-23T16:51:53.662Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 222eeff7f68ed50aa3ef0281b730d530b6bea56598fd3aa432c41e76ea42af20
     keywords:
@@ -143,7 +163,7 @@ entries:
     version: 0.9.7
   - apiVersion: v2
     appVersion: 0.3.6
-    created: "2022-03-11T12:19:27.19338Z"
+    created: "2022-03-23T16:51:53.661129Z"
     description: Helm chart deploys sops-secrets-operator
     digest: b4f8fe41e191f51833c4af0299fc6c2c554b04228ece8ce019015b4166d06468
     keywords:
@@ -163,7 +183,7 @@ entries:
     version: 0.9.6
   - apiVersion: v2
     appVersion: 0.3.5
-    created: "2022-03-11T12:19:27.192521Z"
+    created: "2022-03-23T16:51:53.660203Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 7ab3970270bb4fed2f7fc7c434ad5548f4af8d1e0aa29b8985e46bcdc805f4d2
     keywords:
@@ -183,7 +203,7 @@ entries:
     version: 0.9.5
   - apiVersion: v2
     appVersion: 0.3.4
-    created: "2022-03-11T12:19:27.191538Z"
+    created: "2022-03-23T16:51:53.659413Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 69bc585f2d67a7658f65c184f1522810d5d18f72ed52886fc8c211cc3bd79678
     keywords:
@@ -203,7 +223,7 @@ entries:
     version: 0.9.4
   - apiVersion: v2
     appVersion: 0.3.3
-    created: "2022-03-11T12:19:27.190438Z"
+    created: "2022-03-23T16:51:53.658623Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 4c45b12d750f8f846304c579c428c1e5b84a8fd45033cb84ce607f1437bdc71a
     keywords:
@@ -223,7 +243,7 @@ entries:
     version: 0.9.3
   - apiVersion: v2
     appVersion: 0.3.2
-    created: "2022-03-11T12:19:27.189112Z"
+    created: "2022-03-23T16:51:53.657797Z"
     description: Helm chart deploys sops-secrets-operator
     digest: dbec66ae148cd665612f9b69e0dd139264c47744c797cf504a26556c77ae2130
     keywords:
@@ -243,7 +263,7 @@ entries:
     version: 0.9.2
   - apiVersion: v2
     appVersion: 0.3.1
-    created: "2022-03-11T12:19:27.188161Z"
+    created: "2022-03-23T16:51:53.656936Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 6228534471c0bab5eca824d98963adce99d4754bf03f37130529ac52536c79ad
     keywords:
@@ -263,7 +283,7 @@ entries:
     version: 0.9.1
   - apiVersion: v2
     appVersion: 0.3.0
-    created: "2022-03-11T12:19:27.186826Z"
+    created: "2022-03-23T16:51:53.656106Z"
     description: Helm chart deploys sops-secrets-operator
     digest: b7f077f8acac1b6ec60d0c0eb6326ab33cf3e4b9fb1ee8d94b1fa21f96aa7383
     keywords:
@@ -283,7 +303,7 @@ entries:
     version: 0.9.0
   - apiVersion: v2
     appVersion: 0.2.2
-    created: "2022-03-11T12:19:27.185726Z"
+    created: "2022-03-23T16:51:53.655319Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 39d3d35a28a405e7baf82d507fa642966c2705ac3ca2f10077186a7fec5de1f6
     keywords:
@@ -303,7 +323,7 @@ entries:
     version: 0.8.4
   - apiVersion: v2
     appVersion: 0.2.1
-    created: "2022-03-11T12:19:27.184827Z"
+    created: "2022-03-23T16:51:53.653734Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 4a1a3299532a4ec61acb61db45d763385bc3c2bd50c9c1707e3ba258498b5ee5
     keywords:
@@ -323,7 +343,7 @@ entries:
     version: 0.8.3
   - apiVersion: v2
     appVersion: 0.2.1
-    created: "2022-03-11T12:19:27.183623Z"
+    created: "2022-03-23T16:51:53.652829Z"
     description: Helm chart deploys sops-secrets-operator
     digest: d328b4e165c3945430e196a853836dcee9982929fe24455021ddb885099d5334
     keywords:
@@ -343,7 +363,7 @@ entries:
     version: 0.8.2
   - apiVersion: v2
     appVersion: 0.2.0
-    created: "2022-03-11T12:19:27.182452Z"
+    created: "2022-03-23T16:51:53.652051Z"
     description: Helm chart deploys sops-secrets-operator
     digest: d0ac8b738d0f10d64b2fb78c4386efe91de39aa88a4b107fdf9d93a82d18573c
     keywords:
@@ -363,7 +383,7 @@ entries:
     version: 0.8.1
   - apiVersion: v2
     appVersion: 0.2.0
-    created: "2022-03-11T12:19:27.181193Z"
+    created: "2022-03-23T16:51:53.651282Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 289d7c6c96f858fe15427b1858fbfcdec373fc345acf52e667df4ca5ee729c10
     keywords:
@@ -383,7 +403,7 @@ entries:
     version: 0.8.0
   - apiVersion: v2
     appVersion: 0.1.17
-    created: "2022-03-11T12:19:27.180069Z"
+    created: "2022-03-23T16:51:53.650466Z"
     description: sops secrets operator
     digest: 1c3c4bba7d66a7621beced04856d9904260558fe10369513743bc322d69482c1
     keywords:
@@ -403,7 +423,7 @@ entries:
     version: 0.7.6
   - apiVersion: v2
     appVersion: 0.1.16
-    created: "2022-03-11T12:19:27.17913Z"
+    created: "2022-03-23T16:51:53.649761Z"
     description: sops secrets operator
     digest: c526d5d4b9c7c2cce1d9da2c75b4e9be7a994f24dce159a659189414a8725eae
     keywords:
@@ -423,7 +443,7 @@ entries:
     version: 0.7.5
   - apiVersion: v2
     appVersion: 0.1.16
-    created: "2022-03-11T12:19:27.178136Z"
+    created: "2022-03-23T16:51:53.649053Z"
     description: sops secrets operator
     digest: 572c9015988b76869b58997e02a0c64152283e559721e4883d54f1258a57e8b7
     keywords:
@@ -443,7 +463,7 @@ entries:
     version: 0.7.4
   - apiVersion: v2
     appVersion: 0.1.15
-    created: "2022-03-11T12:19:27.17701Z"
+    created: "2022-03-23T16:51:53.648295Z"
     description: sops secrets operator
     digest: 84365f8e919ba9d3a00cfa50435cce6c63a8383357b2fde062b7aab8baeca6eb
     keywords:
@@ -463,7 +483,7 @@ entries:
     version: 0.7.3
   - apiVersion: v2
     appVersion: 0.1.14
-    created: "2022-03-11T12:19:27.175231Z"
+    created: "2022-03-23T16:51:53.647592Z"
     description: sops secrets operator
     digest: a1f2375080df20421701a33179b8e947ee682a70084d83d85da707889871ad64
     keywords:
@@ -483,7 +503,7 @@ entries:
     version: 0.7.2
   - apiVersion: v2
     appVersion: 0.1.13
-    created: "2022-03-11T12:19:27.174124Z"
+    created: "2022-03-23T16:51:53.646738Z"
     description: sops secrets operator
     digest: 2e81dc4e4d49d9cd802aff263f005e04fb57df07f33b3ce8643ab287dfd3a7fb
     keywords:
@@ -503,7 +523,7 @@ entries:
     version: 0.7.1
   - apiVersion: v2
     appVersion: 0.1.12
-    created: "2022-03-11T12:19:27.172899Z"
+    created: "2022-03-23T16:51:53.645944Z"
     description: sops secrets operator
     digest: 81f59ed60bfa8204ed285476f9ed96a45a6f4e7cc6940a5d246c9241573d93d5
     keywords:
@@ -523,7 +543,7 @@ entries:
     version: 0.7.0
   - apiVersion: v2
     appVersion: 0.1.12
-    created: "2022-03-11T12:19:27.17178Z"
+    created: "2022-03-23T16:51:53.644378Z"
     description: sops secrets operator
     digest: 91c3fbda73ba2d860bdaa21e37bf9afbc260ff767b377a144d0181d116a7ee34
     keywords:
@@ -543,7 +563,7 @@ entries:
     version: 0.6.8
   - apiVersion: v2
     appVersion: 0.1.12
-    created: "2022-03-11T12:19:27.17067Z"
+    created: "2022-03-23T16:51:53.643661Z"
     description: sops secrets operator
     digest: 89d9d41d70d4dafcfb957bd48776ad779d0cef7dbb1ab2daf0b745a53dd6e3c6
     maintainers:
@@ -558,7 +578,7 @@ entries:
     version: 0.6.7
   - apiVersion: v2
     appVersion: 0.1.11
-    created: "2022-03-11T12:19:27.169515Z"
+    created: "2022-03-23T16:51:53.642976Z"
     description: sops secrets operator
     digest: 7b0a65fd6fa9bafa3fd11bfef1a5f91f1e17d8cb8ad65b6377ffdc4d12495d01
     maintainers:
@@ -573,7 +593,7 @@ entries:
     version: 0.6.6
   - apiVersion: v2
     appVersion: 0.1.10
-    created: "2022-03-11T12:19:27.168074Z"
+    created: "2022-03-23T16:51:53.64228Z"
     description: sops secrets operator
     digest: fac31d6cc862cb7b9a81aee52ba1fc4183d70bdcb7424c3dbdd087fb53246b30
     maintainers:
@@ -588,7 +608,7 @@ entries:
     version: 0.6.5
   - apiVersion: v2
     appVersion: 0.1.9
-    created: "2022-03-11T12:19:27.166883Z"
+    created: "2022-03-23T16:51:53.641612Z"
     description: sops secrets operator
     digest: 01347c27e37dfff999ebcee12aae6d0aafa092d7c3b221d566cdf0abe71f4d5a
     maintainers:
@@ -603,7 +623,7 @@ entries:
     version: 0.6.4
   - apiVersion: v2
     appVersion: 0.1.8
-    created: "2022-03-11T12:19:27.165845Z"
+    created: "2022-03-23T16:51:53.640944Z"
     description: sops secrets operator
     digest: 6348b1b1b0e8d3df3926e437b2c0f4ad63268d26e2cb54cbecbb564102e6b19c
     maintainers:
@@ -618,7 +638,7 @@ entries:
     version: 0.6.3
   - apiVersion: v2
     appVersion: 0.1.7
-    created: "2022-03-11T12:19:27.164777Z"
+    created: "2022-03-23T16:51:53.640264Z"
     description: sops secrets operator
     digest: 710c1c9fa73a2ebf791fda4a608b5e29072d42c0b68c803c7bbeed54a582fd7f
     maintainers:
@@ -633,7 +653,7 @@ entries:
     version: 0.6.2
   - apiVersion: v2
     appVersion: 0.1.7
-    created: "2022-03-11T12:19:27.163733Z"
+    created: "2022-03-23T16:51:53.639554Z"
     description: sops secrets operator
     digest: f2a606c3837843241bb9d59adc02c38e1cca98753c602b9f758cc61d735ca7cd
     maintainers:
@@ -648,7 +668,7 @@ entries:
     version: 0.6.1
   - apiVersion: v2
     appVersion: 0.1.6
-    created: "2022-03-11T12:19:27.162126Z"
+    created: "2022-03-23T16:51:53.638844Z"
     description: sops secrets operator
     digest: a2bbf9b39ec5f5b82965037f8f245fb3122adbe31b1c7d336fa1f4cddb228b88
     maintainers:
@@ -663,7 +683,7 @@ entries:
     version: 0.6.0
   - apiVersion: v1
     appVersion: 0.1.8
-    created: "2022-03-11T12:19:27.16105Z"
+    created: "2022-03-23T16:51:53.638179Z"
     description: sops secrets operator
     digest: b89986787f33bb6ed9fb0c658431be8646302e9c1a24537c26269c62249fa071
     maintainers:
@@ -677,7 +697,7 @@ entries:
     version: 0.5.3
   - apiVersion: v1
     appVersion: 0.1.7
-    created: "2022-03-11T12:19:27.16004Z"
+    created: "2022-03-23T16:51:53.637583Z"
     description: sops secrets operator
     digest: 9467709cf6fbe8d9d779cedf15fe388af172b609f3ca452ef3d8894f39d999df
     maintainers:
@@ -691,7 +711,7 @@ entries:
     version: 0.5.2
   - apiVersion: v1
     appVersion: 0.1.7
-    created: "2022-03-11T12:19:27.158974Z"
+    created: "2022-03-23T16:51:53.636885Z"
     description: sops secrets operator
     digest: b54b5d8497564ddc04bd6d8b105eb0a3559e82ae1f6aab2f59ed3e426f119287
     maintainers:
@@ -705,7 +725,7 @@ entries:
     version: 0.5.1
   - apiVersion: v1
     appVersion: 0.1.6
-    created: "2022-03-11T12:19:27.157976Z"
+    created: "2022-03-23T16:51:53.635373Z"
     description: sops secrets operator
     digest: 177f1ed214d6e72eda589a6ab155a417c1a4229bfda11e87f24af125a3542ad1
     maintainers:
@@ -719,7 +739,7 @@ entries:
     version: 0.5.0
   - apiVersion: v2
     appVersion: 0.1.5
-    created: "2022-03-11T12:19:27.156995Z"
+    created: "2022-03-23T16:51:53.634802Z"
     description: sops secrets operator
     digest: 1535e130357afa883db0b3d30735c817d3b7d412fe5bdfd71534d0c08defa7d1
     maintainers:
@@ -734,7 +754,7 @@ entries:
     version: 0.4.8
   - apiVersion: v2
     appVersion: 0.1.5
-    created: "2022-03-11T12:19:27.155915Z"
+    created: "2022-03-23T16:51:53.63414Z"
     description: sops secrets operator
     digest: 19b11dc2d1945f3c436a7d03763b4391d4a382fc13ea515d25422827d859d6d0
     maintainers:
@@ -749,7 +769,7 @@ entries:
     version: 0.4.7
   - apiVersion: v2
     appVersion: 0.1.5
-    created: "2022-03-11T12:19:27.154967Z"
+    created: "2022-03-23T16:51:53.633614Z"
     description: sops secrets operator
     digest: c839e5d3374b948d27ad49643411f4891fdec44d179dea06423bb0d6e29d5e32
     maintainers:
@@ -764,7 +784,7 @@ entries:
     version: 0.4.6
   - apiVersion: v2
     appVersion: 0.1.4
-    created: "2022-03-11T12:19:27.153835Z"
+    created: "2022-03-23T16:51:53.633071Z"
     description: sops secrets operator
     digest: c71f9f66be32f8b9d3c8d780b09b2455a40fd9755314004efd2bb8d379dafe3c
     maintainers:
@@ -779,7 +799,7 @@ entries:
     version: 0.4.5
   - apiVersion: v2
     appVersion: 0.1.3
-    created: "2022-03-11T12:19:27.152917Z"
+    created: "2022-03-23T16:51:53.632537Z"
     description: sops secrets operator
     digest: f3f2f89d4ef6018776df0a12a63dd2f9c9519b9d1ac03a9a405e31d0fd902ba0
     maintainers:
@@ -794,7 +814,7 @@ entries:
     version: 0.4.4
   - apiVersion: v2
     appVersion: 0.1.2
-    created: "2022-03-11T12:19:27.151999Z"
+    created: "2022-03-23T16:51:53.632046Z"
     description: sops secrets operator
     digest: 1fd5eed318627f5ed0656f4e8ce4a25729568a1626ae313bcbe21050f5f26240
     maintainers:
@@ -809,7 +829,7 @@ entries:
     version: 0.4.3
   - apiVersion: v2
     appVersion: 0.1.2
-    created: "2022-03-11T12:19:27.15096Z"
+    created: "2022-03-23T16:51:53.631528Z"
     description: sops secrets operator
     digest: 1f4f9869c75f0922e83ba5d530e101bd4252d5c1c31365800cc9d1425680cf18
     maintainers:
@@ -824,7 +844,7 @@ entries:
     version: 0.4.2
   - apiVersion: v2
     appVersion: 0.1.1
-    created: "2022-03-11T12:19:27.149906Z"
+    created: "2022-03-23T16:51:53.631014Z"
     description: sops secrets operator
     digest: 6b054a4e9f261eea3cb84ee2e70b87b24780f1703e2c218ea5f69b7f82d1876f
     maintainers:
@@ -839,7 +859,7 @@ entries:
     version: 0.4.1
   - apiVersion: v2
     appVersion: 0.1.0
-    created: "2022-03-11T12:19:27.148917Z"
+    created: "2022-03-23T16:51:53.630513Z"
     description: sops secrets operator
     digest: 78b62ab37eac1b45f0a68a9752a3615c5d3f1c960bb4057e665923ce104931cf
     maintainers:
@@ -854,7 +874,7 @@ entries:
     version: 0.4.0
   - apiVersion: v1
     appVersion: 0.1.5
-    created: "2022-03-11T12:19:27.147976Z"
+    created: "2022-03-23T16:51:53.630011Z"
     description: sops secrets operator
     digest: 41baa3c580cb9d8951c18513a4f04c4dbbfad99de9c62f53de2450c0c7b76725
     maintainers:
@@ -868,7 +888,7 @@ entries:
     version: 0.3.7
   - apiVersion: v1
     appVersion: 0.1.5
-    created: "2022-03-11T12:19:27.146066Z"
+    created: "2022-03-23T16:51:53.629401Z"
     description: sops secrets operator
     digest: 1103b1f7bf7af3f400c172227cd5a3659f3a03e5e8158b19ba0b25f7ed45208b
     maintainers:
@@ -882,7 +902,7 @@ entries:
     version: 0.3.6
   - apiVersion: v1
     appVersion: 0.1.5
-    created: "2022-03-11T12:19:27.14518Z"
+    created: "2022-03-23T16:51:53.628884Z"
     description: sops secrets operator
     digest: 15c72ba7fb09d0e980ec32fd94f56893c439c05c435281a9ab9c8bc94bd20063
     maintainers:
@@ -896,7 +916,7 @@ entries:
     version: 0.3.5
   - apiVersion: v1
     appVersion: 0.1.4
-    created: "2022-03-11T12:19:27.144285Z"
+    created: "2022-03-23T16:51:53.628362Z"
     description: sops secrets operator
     digest: 025a6a6381b75286756ef55105ace6e911e5a5818b495ede6356cc8ec572aeac
     maintainers:
@@ -910,7 +930,7 @@ entries:
     version: 0.3.4
   - apiVersion: v1
     appVersion: 0.1.3
-    created: "2022-03-11T12:19:27.143338Z"
+    created: "2022-03-23T16:51:53.627816Z"
     description: sops secrets operator
     digest: f61b070b640169439cf4ab500047c1e356748a85871f7aeefde46d63d87d453a
     maintainers:
@@ -924,7 +944,7 @@ entries:
     version: 0.3.3
   - apiVersion: v1
     appVersion: 0.1.2
-    created: "2022-03-11T12:19:27.142501Z"
+    created: "2022-03-23T16:51:53.626404Z"
     description: sops secrets operator
     digest: 2b37dc4e545e8a9540f6b7693079b98bf161ec5a68899defcfc9420bdcbb33e3
     maintainers:
@@ -938,7 +958,7 @@ entries:
     version: 0.3.2
   - apiVersion: v1
     appVersion: 0.1.1
-    created: "2022-03-11T12:19:27.141657Z"
+    created: "2022-03-23T16:51:53.625841Z"
     description: sops secrets operator
     digest: 2e2762b8f9d66aab0caacde225955fec8bfd5a4cc10dc6943a1de3809dda4091
     maintainers:
@@ -952,7 +972,7 @@ entries:
     version: 0.3.1
   - apiVersion: v1
     appVersion: 0.1.0
-    created: "2022-03-11T12:19:27.140852Z"
+    created: "2022-03-23T16:51:53.625285Z"
     description: sops secrets operator
     digest: ce84f5b64402a582c7689cb842ba03fb10f968c38b57dc9e05f588493128019a
     maintainers:
@@ -966,7 +986,7 @@ entries:
     version: 0.3.0
   - apiVersion: v2
     appVersion: 0.0.10
-    created: "2022-03-11T12:19:27.139969Z"
+    created: "2022-03-23T16:51:53.624739Z"
     description: sops secrets operator
     digest: 5e4c8bc37ea2c819c55b288c0a5e76ff8c9c02be591bd53776606666af45581c
     maintainers:
@@ -981,7 +1001,7 @@ entries:
     version: 0.2.1
   - apiVersion: v1
     appVersion: 0.0.10
-    created: "2022-03-11T12:19:27.129968Z"
+    created: "2022-03-23T16:51:53.617032Z"
     description: sops secrets operator
     digest: 50b8ebab19008dfc43de1eaee8b0f6287f7a55134585dc6ae88df2520d779f8f
     maintainers:
@@ -993,4 +1013,4 @@ entries:
     urls:
     - https://isindir.github.io/sops-secrets-operator/sops-secrets-operator-0.1.10.tgz
     version: 0.1.10
-generated: "2022-03-11T12:19:27.128593Z"
+generated: "2022-03-23T16:51:53.616298Z"
diff --git a/docs/sops-secrets-operator-0.10.6.tgz b/docs/sops-secrets-operator-0.10.6.tgz
new file mode 100644
index 00000000..e158c62f
Binary files /dev/null and b/docs/sops-secrets-operator-0.10.6.tgz differ
diff --git a/go.mod b/go.mod
index e172baf1..977e7780 100644
--- a/go.mod
+++ b/go.mod
@@ -1,7 +1,7 @@
 module github.com/isindir/sops-secrets-operator
 
 // UPDATE_HERE
-go 1.17
+go 1.18
 
 require (
 	github.com/go-logr/logr v1.2.2
@@ -9,9 +9,9 @@ require (
 	github.com/onsi/gomega v1.18.1
 	github.com/sirupsen/logrus v1.8.1
 	go.mozilla.org/sops/v3 v3.7.2
-	k8s.io/api v0.23.1
-	k8s.io/apimachinery v0.23.1
-	k8s.io/client-go v0.23.1
+	k8s.io/api v0.23.3
+	k8s.io/apimachinery v0.23.3
+	k8s.io/client-go v0.23.3
 	sigs.k8s.io/controller-runtime v0.11.1
 )
 
@@ -108,8 +108,8 @@ require (
 	k8s.io/component-base v0.23.0 // indirect
 	k8s.io/klog/v2 v2.30.0 // indirect
 	k8s.io/kube-openapi v0.0.0-20211115234752-e816edb12b65 // indirect
-	k8s.io/utils v0.0.0-20210930125809-cb0fa318a74b // indirect
+	k8s.io/utils v0.0.0-20211116205334-6203023598ed // indirect
 	sigs.k8s.io/json v0.0.0-20211020170558-c049b76a60c6 // indirect
-	sigs.k8s.io/structured-merge-diff/v4 v4.2.0 // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.2.1 // indirect
 	sigs.k8s.io/yaml v1.3.0 // indirect
 )
diff --git a/go.sum b/go.sum
index 9ac9d1e9..9a17b168 100644
--- a/go.sum
+++ b/go.sum
@@ -1,7 +1,6 @@
 cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
 cloud.google.com/go v0.34.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
 cloud.google.com/go v0.38.0/go.mod h1:990N+gfupTy94rShfmMCWGDn0LpTmnzTp2qbd1dvSRU=
-cloud.google.com/go v0.43.0/go.mod h1:BOSR3VbTLkk6FDC/TcffxP4NF/FFBGA5ku+jvKOP7pg=
 cloud.google.com/go v0.44.1/go.mod h1:iSa0KzasP4Uvy3f1mN/7PiObzGgflwredwwASm/v6AU=
 cloud.google.com/go v0.44.2/go.mod h1:60680Gw3Yr4ikxnPRS/oxxkBccT6SA1yMk63TGekxKY=
 cloud.google.com/go v0.45.1/go.mod h1:RpBamKRgapWJb87xiFSdk4g1CME7QZg3uwTez+TSTjc=
@@ -45,7 +44,6 @@ filippo.io/age v1.0.0-beta7/go.mod h1:chAuTrTb0FTTmKtvs6fQTGhYTvH9AigjN1uEUsvLdZ
 filippo.io/edwards25519 v1.0.0-alpha.2/go.mod h1:X+pm78QAUPtFLi1z9PYIlS/bdDnvbCOGKtZ+ACWEf7o=
 github.com/Azure/azure-sdk-for-go v31.2.0+incompatible h1:kZFnTLmdQYNGfakatSivKHUfUnDZhqNdchHD4oIhp5k=
 github.com/Azure/azure-sdk-for-go v31.2.0+incompatible/go.mod h1:9XXNKU+eRnpl9moKnB4QOLf1HestfXbmab5FXxiDBjc=
-github.com/Azure/go-ansiterm v0.0.0-20170929234023-d6e3b3328b78/go.mod h1:LmzpDX56iTiv29bbRTIsUNlaFfuhWRQBWjQdVyAevI8=
 github.com/Azure/go-ansiterm v0.0.0-20210608223527-2377c96fe795/go.mod h1:LmzpDX56iTiv29bbRTIsUNlaFfuhWRQBWjQdVyAevI8=
 github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 h1:UQHMgLO+TxOElx5B5HZ4hJQsoJ/PvUvKRhJHDQXO8P8=
 github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E=
@@ -84,11 +82,9 @@ github.com/Azure/go-autorest/tracing v0.6.0/go.mod h1:+vhtPC754Xsa23ID7GlGsrdKBp
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
 github.com/Microsoft/go-winio v0.4.14 h1:+hMXMk01us9KgxGb7ftKQt2Xpf5hH/yky+TDA+qxleU=
-github.com/Microsoft/go-winio v0.4.14/go.mod h1:qXqCSQ3Xa7+6tgxaGTIe4Kpcdsi+P8jBhyzoq1bpyYA=
 github.com/NYTimes/gziphandler v0.0.0-20170623195520-56545f4a5d46/go.mod h1:3wb06e3pkSAbeQ52E9H9iFoQsEEwGN64994WTCIhntQ=
 github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c=
 github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5 h1:TngWCqHvy9oXAN6lEVMRuU21PR1EtLVZJmdB18Gu3Rw=
-github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5/go.mod h1:lmUJ/7eu/Q8D7ML55dXQrVaamCz2vxCfdQBasLZfHKk=
 github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU=
 github.com/PuerkitoBio/purell v1.1.1/go.mod h1:c11w/QuzBsJSee3cPx9rAFu61PvFxuPbtSwDGJws/X0=
 github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578/go.mod h1:uGdkoq3SwY9Y+13GIhn11/XLaGBb4BfwItxLd5jeuXE=
@@ -120,12 +116,10 @@ github.com/bketelsen/crypt v0.0.3-0.20200106085610-5cbc8cc4026c/go.mod h1:MKsuJm
 github.com/bketelsen/crypt v0.0.4/go.mod h1:aI6NrJ0pMGgvZKL1iVgXLnfIFJtfV+bKCoqOes/6LfM=
 github.com/blang/semver v3.5.1+incompatible/go.mod h1:kRBLl5iJ+tD4TcOOxsy/0fnwebNt5EWlYSAyrTnjyyk=
 github.com/cenkalti/backoff v2.2.1+incompatible h1:tNowT99t7UNflLxfYYSlKYsBpXdEet03Pg2g16Swow4=
-github.com/cenkalti/backoff v2.2.1+incompatible/go.mod h1:90ReRw6GdpyfrHakVjL/QHaoyV4aDUVVkXQJJJ3NXXM=
 github.com/census-instrumentation/opencensus-proto v0.2.0/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
 github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
 github.com/certifi/gocertifi v0.0.0-20191021191039-0944d244cd40/go.mod h1:sGbDF6GwGcLpkNXPUTkMRoywsNa/ol15pxFe6ERfguA=
 github.com/certifi/gocertifi v0.0.0-20200922220541-2c3bb06c6054/go.mod h1:sGbDF6GwGcLpkNXPUTkMRoywsNa/ol15pxFe6ERfguA=
-github.com/cespare/xxhash v1.1.0 h1:a6HrQnmkObjyL+Gs60czilIUGqrzKutQD6XZog3p+ko=
 github.com/cespare/xxhash v1.1.0/go.mod h1:XrSqR1VqqWfGrhpAt58auRo0WTKS1nRRg3ghfAqPWnc=
 github.com/cespare/xxhash/v2 v2.1.1 h1:6MnRN8NT7+YBpUIWxHtefFZOKTAPgGjpQSxqLNn0+qY=
 github.com/cespare/xxhash/v2 v2.1.1/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
@@ -141,7 +135,6 @@ github.com/cockroachdb/datadriven v0.0.0-20200714090401-bf6692d28da5/go.mod h1:h
 github.com/cockroachdb/errors v1.2.4/go.mod h1:rQD95gz6FARkaKkQXUksEje/d9a6wBJoCr5oaCLELYA=
 github.com/cockroachdb/logtags v0.0.0-20190617123548-eb05cc24525f/go.mod h1:i/u985jwjWRlyHXQbwatDASoW0RMlZ/3i9yJHE2xLkI=
 github.com/containerd/continuity v0.0.0-20190426062206-aaeac12a7ffc h1:TP+534wVlf61smEIq1nwLLAjQVEK2EADoW3CX9AuT+8=
-github.com/containerd/continuity v0.0.0-20190426062206-aaeac12a7ffc/go.mod h1:GL3xCUCBDV3CZiTSEKksMWbLE66hEyuu9qyDOOqM47Y=
 github.com/coreos/bbolt v1.3.2/go.mod h1:iRUV2dpdMOn7Bo10OQBFzIJO9kkE559Wcmn+qkEiiKk=
 github.com/coreos/etcd v3.3.13+incompatible/go.mod h1:uF7uidLiAD3TWHmW31ZFd/JWoc32PjwdhPthX9715RE=
 github.com/coreos/go-oidc v2.1.0+incompatible/go.mod h1:CgnwVTmzoESiwO9qyAFEMiHoZ1nMCKZlZ9V6mm3/LKc=
@@ -160,9 +153,7 @@ github.com/dgryski/go-sip13 v0.0.0-20181026042036-e10d5fee7954/go.mod h1:vAd38F8
 github.com/dimchansky/utfbom v1.1.0 h1:FcM3g+nofKgUteL8dm/UpdRXNC9KmADgTpLKsu0TRo4=
 github.com/dimchansky/utfbom v1.1.0/go.mod h1:rO41eb7gLfo8SF1jd9F8HplJm1Fewwi4mQvIirEdv+8=
 github.com/docker/go-connections v0.4.0 h1:El9xVISelRB7BuFusrZozjnkIM5YnzCViNKohAFqRJQ=
-github.com/docker/go-connections v0.4.0/go.mod h1:Gbd7IOopHjR8Iph03tsViu4nIes5XhDvyHbTtUxmeec=
 github.com/docker/go-units v0.4.0 h1:3uh0PgVws3nIA0Q+MwDC8yjEPf9zjRfZZWXZYDct3Tw=
-github.com/docker/go-units v0.4.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
 github.com/docopt/docopt-go v0.0.0-20180111231733-ee0de3bc6815/go.mod h1:WwZ+bS3ebgob9U8Nd0kOddGdZWjyMGR8Wziv+TBNwSE=
 github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk=
 github.com/eapache/go-resiliency v1.1.0/go.mod h1:kFI+JgMyC7bLPUVY133qvEBtVayf5mFgVsvEsIPBvNs=
@@ -302,7 +293,6 @@ github.com/google/pprof v0.0.0-20210122040257-d980be63207e/go.mod h1:kpwsk12EmLe
 github.com/google/pprof v0.0.0-20210226084205-cbba55b83ad5/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
 github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
 github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI=
-github.com/google/shlex v0.0.0-20181106134648-c34317bd91bf/go.mod h1:RpwtwJQFrIEPstU94h88MWPXP2ektJZ8cZ0YntAmXiE=
 github.com/google/uuid v1.1.2 h1:EVhdT+1Kseyi1/pUmXKaFxYsDNy9RQYkMWRH68J/W7Y=
 github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/googleapis/gax-go/v2 v2.0.4/go.mod h1:0Wqv26UfaUD9n4G6kQubkQ+KchISgw+vpHVxEJEs9eg=
@@ -316,7 +306,6 @@ github.com/gorilla/context v1.1.1/go.mod h1:kBGZzfjB9CEq2AlWe17Uuf7NDRt0dE0s8S51
 github.com/gorilla/mux v1.6.2/go.mod h1:1lud6UwP+6orDFRuTfBEV8e9/aOM/c4fVVCaMa2zaAs=
 github.com/gorilla/mux v1.8.0/go.mod h1:DVbg23sWSpFRCP0SfiEN6jmj59UnW/n46BH5rLB71So=
 github.com/gorilla/websocket v1.4.2/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
-github.com/gotestyourself/gotestyourself v2.2.0+incompatible/go.mod h1:zZKM6oeNM8k+FRljX1mnzVYeS8wiGgQyvST1/GafPbY=
 github.com/goware/prefixer v0.0.0-20160118172347-395022866408 h1:Y9iQJfEqnN3/Nce9cOegemcy/9Ai5k3huT6E80F3zaw=
 github.com/goware/prefixer v0.0.0-20160118172347-395022866408/go.mod h1:PE1ycukgRPJ7bJ9a1fdfQ9j8i/cEcRAoLZzbxYpNB/s=
 github.com/gregjones/httpcache v0.0.0-20180305231024-9cad4c3443a7/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA=
@@ -479,15 +468,11 @@ github.com/onsi/gomega v1.17.0/go.mod h1:HnhC7FXeEQY45zxNK3PPoIUhzk/80Xly9PcubAl
 github.com/onsi/gomega v1.18.1 h1:M1GfJqGRrBrrGGsbxzV5dqM2U2ApXefZCQpkukxYRLE=
 github.com/onsi/gomega v1.18.1/go.mod h1:0q+aL8jAiMXy9hbwj2mr5GziHiwhAIQpFmmtT5hitRs=
 github.com/opencontainers/go-digest v1.0.0-rc1 h1:WzifXhOVOEOuFYOJAW6aQqW0TooG2iki3E3Ii+WN7gQ=
-github.com/opencontainers/go-digest v1.0.0-rc1/go.mod h1:cMLVZDEM3+U2I4VmLI6N8jQYUd2OVphdqWwCJHrFt2s=
 github.com/opencontainers/image-spec v1.0.1 h1:JMemWkRwHx4Zj+fVxWoMCFm/8sYGGrUVojFA6h/TRcI=
-github.com/opencontainers/image-spec v1.0.1/go.mod h1:BtxoFyWECRxE4U/7sNtV5W15zMzWCbyJoFRP3s7yZA0=
 github.com/opencontainers/runc v0.1.1 h1:GlxAyO6x8rfZYN9Tt0Kti5a/cP41iuiO2yYT0IJGY8Y=
-github.com/opencontainers/runc v0.1.1/go.mod h1:qT5XzbpPznkRYVz/mWwUaVBUv2rmF59PVA73FjuZG0U=
 github.com/opentracing/opentracing-go v1.1.0/go.mod h1:UkNAQd3GIcIGf0SeVgPpRdFStlNbqXla1AfSYxPUl2o=
 github.com/openzipkin/zipkin-go v0.1.6/go.mod h1:QgAqvLzwWbR/WpD4A3cGpPtJrZXNIiJc5AZX7/PBEpw=
 github.com/ory/dockertest v3.3.4+incompatible h1:VrpM6Gqg7CrPm3bL4Wm1skO+zFWLbh7/Xb5kGEbJRh8=
-github.com/ory/dockertest v3.3.4+incompatible/go.mod h1:1vX4m9wsvi00u5bseYwXaSnhNrne+V0E6LAcBILJdPs=
 github.com/pascaldekloe/goe v0.0.0-20180627143212-57f6aae5913c/go.mod h1:lzWF7FIEvWOWxwDKqyGYQf6ZUaNfKdP144TG7ZOy1lc=
 github.com/pascaldekloe/goe v0.1.0/go.mod h1:lzWF7FIEvWOWxwDKqyGYQf6ZUaNfKdP144TG7ZOy1lc=
 github.com/pelletier/go-toml v1.2.0/go.mod h1:5z9KED0ma1S8pY6P1sdut58dfprrGBbd/94hg7ilaic=
@@ -547,14 +532,12 @@ github.com/sergi/go-diff v1.1.0 h1:we8PVUC3FE2uYfodKH/nBHMSetSfHDR6scGdBi+erh0=
 github.com/sergi/go-diff v1.1.0/go.mod h1:STckp+ISIX8hZLjrqAeVduY0gWCT9IjLuqbuNXdaHfM=
 github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
 github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
-github.com/sirupsen/logrus v1.4.1/go.mod h1:ni0Sbl8bgC9z8RoU9G6nDWqqs/fq4eDPysMBDgk/93Q=
 github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
 github.com/sirupsen/logrus v1.6.0/go.mod h1:7uNnSEd1DgxDLC74fIahvMZmmYsHGZGEOFrfsX/uA88=
 github.com/sirupsen/logrus v1.7.0/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
 github.com/sirupsen/logrus v1.8.1 h1:dJKuHgqk1NNQlqoA6BTlM1Wf9DOH3NBjQyu0h9+AZZE=
 github.com/sirupsen/logrus v1.8.1/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
 github.com/smartystreets/assertions v0.0.0-20180927180507-b2de0cb4f26d/go.mod h1:OnSkiWE9lh6wB0YB77sQom3nweQdgAjqCqsofrRNTgc=
-github.com/smartystreets/goconvey v0.0.0-20190710185942-9d28bd7c0945/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA=
 github.com/smartystreets/goconvey v1.6.4/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA=
 github.com/soheilhy/cmux v0.1.4/go.mod h1:IM3LyeVVIOuxMH7sFAkER9+bJ4dT7Ms6E4xg4kGIyLM=
 github.com/soheilhy/cmux v0.1.5/go.mod h1:T7TcVDs9LWfQgPlPsdngu6I6QIoyIFZDDC6sNE1GqG0=
@@ -635,7 +618,6 @@ go.uber.org/atomic v1.7.0/go.mod h1:fEN4uk6kAWBTFdckzkM89CLk9XfWZrxpCo0nPH17wJc=
 go.uber.org/goleak v1.1.10/go.mod h1:8a7PlsEVH3e/a/GLqe5IIrQx6GzcnRmZEufDUTk4A7A=
 go.uber.org/goleak v1.1.11-0.20210813005559-691160354723/go.mod h1:cwTWslyiVhfpKIDGSZEM2HlOvcqm+tG4zioyIeLoqMQ=
 go.uber.org/goleak v1.1.12 h1:gZAh5/EyT/HQwlpkCy6wTpqfH9H8Lz8zbm3dZh+OyzA=
-go.uber.org/goleak v1.1.12/go.mod h1:cwTWslyiVhfpKIDGSZEM2HlOvcqm+tG4zioyIeLoqMQ=
 go.uber.org/multierr v1.1.0/go.mod h1:wR5kodmAFQ0UK8QlbwjlSNy0Z68gJhDJUG5sjR94q/0=
 go.uber.org/multierr v1.6.0 h1:y6IPFStTAIT5Ytl7/XYmHvzXQ7S3g/IeZW9hyZ5thw4=
 go.uber.org/multierr v1.6.0/go.mod h1:cdWPpRnG4AhwMwsgIHip0KRBQjJy5kYEpYjJxpXp9iU=
@@ -655,7 +637,6 @@ golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8U
 golang.org/x/crypto v0.0.0-20200323165209-0ec3e9974c59/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20201002170205-7f63de1d35b0/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
-golang.org/x/crypto v0.0.0-20210220033148-5ea612d1eb83/go.mod h1:jdWPYTVW3xRLrWPugEBEK3UY2ZEsg3UU495nc5E+M+I=
 golang.org/x/crypto v0.0.0-20210817164053-32db794688a5 h1:HWj/xjIHfjYU5nVXpTM0s39J9CbLn7Cc5a7IC5rwsMQ=
 golang.org/x/crypto v0.0.0-20210817164053-32db794688a5/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
@@ -836,10 +817,8 @@ golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210809222454-d867a43fc93e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210831042530-f4d43177bf5e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20211029165221-6e7872819dc8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e h1:fLOSk5Q00efkSvAm+4xcoXD+RRmLmmulPn5I3Y9F2EM=
 golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210615171337-6886f2dfbf5b h1:9zKuko04nR4gjZ4+DNjHqRlAJqbJETHwiNKDqTfOjfE=
 golang.org/x/term v0.0.0-20210615171337-6886f2dfbf5b/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
@@ -965,7 +944,6 @@ google.golang.org/genproto v0.0.0-20190404172233-64821d5d2107/go.mod h1:VzzqZJRn
 google.golang.org/genproto v0.0.0-20190418145605-e7d98fc518a7/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
 google.golang.org/genproto v0.0.0-20190425155659-357c62f0e4bb/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
 google.golang.org/genproto v0.0.0-20190502173448-54afdca5d873/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
-google.golang.org/genproto v0.0.0-20190716160619-c506a9f90610/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
 google.golang.org/genproto v0.0.0-20190801165951-fa694d86fc64/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
 google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
 google.golang.org/genproto v0.0.0-20190911173649-1774047e7e51/go.mod h1:IbNlFCBrqXvoKpeg0TB2l7cyZUmoaFKYIwrEpbDKLA8=
@@ -1059,7 +1037,6 @@ gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
 gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
 gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
 gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
-gopkg.in/ini.v1 v1.44.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
 gopkg.in/ini.v1 v1.51.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
 gopkg.in/ini.v1 v1.62.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
 gopkg.in/natefinch/lumberjack.v2 v2.0.0/go.mod h1:l0ndWWf7gzL7RNwBG7wST/UCcT4T24xpD6X8LsfU/+k=
@@ -1069,7 +1046,6 @@ gopkg.in/square/go-jose.v2 v2.3.1 h1:SK5KegNXmKmqE342YYN2qPHEnUYeoMiXXl1poUlI+o4
 gopkg.in/square/go-jose.v2 v2.3.1/go.mod h1:M9dMgbHiYLoDGQrXy7OpJDJWiKiU//h+vD76mk0e1AI=
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ=
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw=
-gopkg.in/urfave/cli.v1 v1.20.0/go.mod h1:vuBzUtMdQeixQj8LVd+/98pzhxNGQoyuPBlsXHOQNO0=
 gopkg.in/yaml.v2 v2.0.0-20170812160011-eb3733d160e7/go.mod h1:JAlM8MvJe8wmxCU4Bli9HhUf9+ttbYbLASfIpnQbh74=
 gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
@@ -1082,10 +1058,8 @@ gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
 gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.0-20200615113413-eeeca48fe776/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-gopkg.in/yaml.v3 v3.0.0-20210107172259-749611fa9fcc/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b h1:h8qDotaEPuJATrMmW04NCwg7v22aHH28wwpauUhK9Oo=
 gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-gotest.tools v2.2.0+incompatible/go.mod h1:DsYFclhRJ6vuDpmuTbkuFWG+y2sxOXAzmJt81HFBacw=
 gotest.tools/v3 v3.0.2/go.mod h1:3SzNCllyD9/Y+b5r9JIKQ474KzkZyqLqEfYqMsX94Bk=
 gotest.tools/v3 v3.0.3/go.mod h1:Z7Lb0S5l+klDB31fvDQX8ss/FlKDxtlFlw3Oa8Ymbl8=
 honnef.co/go/tools v0.0.0-20180728063816-88497007e858/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
@@ -1097,17 +1071,17 @@ honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt
 honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
 honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
 k8s.io/api v0.23.0/go.mod h1:8wmDdLBHBNxtOIytwLstXt5E9PddnZb0GaMcqsvDBpg=
-k8s.io/api v0.23.1 h1:ncu/qfBfUoClqwkTGbeRqqOqBCRoUAflMuOaOD7J0c8=
-k8s.io/api v0.23.1/go.mod h1:WfXnOnwSqNtG62Y1CdjoMxh7r7u9QXGCkA1u0na2jgo=
+k8s.io/api v0.23.3 h1:KNrME8KHGr12Ozjf8ytOewKzZh6hl/hHUZeHddT3a38=
+k8s.io/api v0.23.3/go.mod h1:w258XdGyvCmnBj/vGzQMj6kzdufJZVUwEM1U2fRJwSQ=
 k8s.io/apiextensions-apiserver v0.23.0 h1:uii8BYmHYiT2ZTAJxmvc3X8UhNYMxl2A0z0Xq3Pm+WY=
 k8s.io/apiextensions-apiserver v0.23.0/go.mod h1:xIFAEEDlAZgpVBl/1VSjGDmLoXAWRG40+GsWhKhAxY4=
 k8s.io/apimachinery v0.23.0/go.mod h1:fFCTTBKvKcwTPFzjlcxp91uPFZr+JA0FubU4fLzzFYc=
-k8s.io/apimachinery v0.23.1 h1:sfBjlDFwj2onG0Ijx5C+SrAoeUscPrmghm7wHP+uXlo=
-k8s.io/apimachinery v0.23.1/go.mod h1:SADt2Kl8/sttJ62RRsi9MIV4o8f5S3coArm0Iu3fBno=
+k8s.io/apimachinery v0.23.3 h1:7IW6jxNzrXTsP0c8yXz2E5Yx/WTzVPTsHIx/2Vm0cIk=
+k8s.io/apimachinery v0.23.3/go.mod h1:BEuFMMBaIbcOqVIJqNZJXGFTP4W6AycEpb5+m/97hrM=
 k8s.io/apiserver v0.23.0/go.mod h1:Cec35u/9zAepDPPFyT+UMrgqOCjgJ5qtfVJDxjZYmt4=
 k8s.io/client-go v0.23.0/go.mod h1:hrDnpnK1mSr65lHHcUuIZIXDgEbzc7/683c6hyG4jTA=
-k8s.io/client-go v0.23.1 h1:Ma4Fhf/p07Nmj9yAB1H7UwbFHEBrSPg8lviR24U2GiQ=
-k8s.io/client-go v0.23.1/go.mod h1:6QSI8fEuqD4zgFK0xbdwfB/PthBsIxCJMa3s17WlcO0=
+k8s.io/client-go v0.23.3 h1:23QYUmCQ/W6hW78xIwm3XqZrrKZM+LWDqW2zfo+szJs=
+k8s.io/client-go v0.23.3/go.mod h1:47oMd+YvAOqZM7pcQ6neJtBiFH7alOyfunYN48VsmwE=
 k8s.io/code-generator v0.23.0/go.mod h1:vQvOhDXhuzqiVfM/YHp+dmg10WDZCchJVObc9MvowsE=
 k8s.io/component-base v0.23.0 h1:UAnyzjvVZ2ZR1lF35YwtNY6VMN94WtOnArcXBu34es8=
 k8s.io/component-base v0.23.0/go.mod h1:DHH5uiFvLC1edCpvcTDV++NKULdYYU6pR9Tt3HIKMKI=
@@ -1119,8 +1093,9 @@ k8s.io/klog/v2 v2.30.0/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0=
 k8s.io/kube-openapi v0.0.0-20211115234752-e816edb12b65 h1:E3J9oCLlaobFUqsjG9DfKbP2BmgwBL2p7pn0A3dG9W4=
 k8s.io/kube-openapi v0.0.0-20211115234752-e816edb12b65/go.mod h1:sX9MT8g7NVZM5lVL/j8QyCCJe8YSMW30QvGZWaCIDIk=
 k8s.io/utils v0.0.0-20210802155522-efc7438f0176/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
-k8s.io/utils v0.0.0-20210930125809-cb0fa318a74b h1:wxEMGetGMur3J1xuGLQY7GEQYg9bZxKn3tKo5k/eYcs=
 k8s.io/utils v0.0.0-20210930125809-cb0fa318a74b/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
+k8s.io/utils v0.0.0-20211116205334-6203023598ed h1:ck1fRPWPJWsMd8ZRFsWc6mh/zHp5fZ/shhbrgPUxDAE=
+k8s.io/utils v0.0.0-20211116205334-6203023598ed/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
 rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=
 rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
 rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=
@@ -1131,8 +1106,8 @@ sigs.k8s.io/json v0.0.0-20211020170558-c049b76a60c6 h1:fD1pz4yfdADVNfFmcP2aBEtud
 sigs.k8s.io/json v0.0.0-20211020170558-c049b76a60c6/go.mod h1:p4QtZmO4uMYipTQNzagwnNoseA6OxSUutVw05NhYDRs=
 sigs.k8s.io/structured-merge-diff/v4 v4.0.2/go.mod h1:bJZC9H9iH24zzfZ/41RGcq60oK1F7G282QMXDPYydCw=
 sigs.k8s.io/structured-merge-diff/v4 v4.1.2/go.mod h1:j/nl6xW8vLS49O8YvXW1ocPhZawJtm+Yrr7PPRQ0Vg4=
-sigs.k8s.io/structured-merge-diff/v4 v4.2.0 h1:kDvPBbnPk+qYmkHmSo8vKGp438IASWofnbbUKDE/bv0=
-sigs.k8s.io/structured-merge-diff/v4 v4.2.0/go.mod h1:j/nl6xW8vLS49O8YvXW1ocPhZawJtm+Yrr7PPRQ0Vg4=
+sigs.k8s.io/structured-merge-diff/v4 v4.2.1 h1:bKCqE9GvQ5tiVHn5rfn1r+yao3aLQEaLzkkmAkf+A6Y=
+sigs.k8s.io/structured-merge-diff/v4 v4.2.1/go.mod h1:j/nl6xW8vLS49O8YvXW1ocPhZawJtm+Yrr7PPRQ0Vg4=
 sigs.k8s.io/yaml v1.2.0/go.mod h1:yfXDCHCao9+ENCvLSE62v9VSji2MKu5jeNfTrofGhJc=
 sigs.k8s.io/yaml v1.3.0 h1:a2VclLzOGrwOHDiV8EfBGhvjHvP46CtW5j6POvhYGGo=
 sigs.k8s.io/yaml v1.3.0/go.mod h1:GeOyir5tyXNByN85N/dRIT9es5UQNerPYEKK56eTBm8=