From 5cc657e5a968c34252ad3c96149a4819bc2db228 Mon Sep 17 00:00:00 2001
From: isindir <isindir@users.sf.net>
Date: Wed, 23 Mar 2022 19:50:37 +0000
Subject: [PATCH] fix: refactor to make code cleaner and bump version of golang
 and envtest (#102)

* fix: refactor to make code cleaner

* Fix typo

* Fix typo

* Fix typo

* bump k3d and k3s

* Fix typo

* Fix typo

* update all components

* Fix typo
---
 .circleci/config.yml                          |  36 +-
 .tool-versions                                |   4 +-
 Dockerfile                                    |   4 +-
 Makefile                                      |   6 +-
 README.md                                     |   2 +-
 chart/helm3/sops-secrets-operator/Chart.yaml  |   4 +-
 chart/helm3/sops-secrets-operator/Makefile    |   2 +-
 chart/helm3/sops-secrets-operator/README.md   |   4 +-
 .../tests/operator_test.yaml                  |   8 +-
 chart/helm3/sops-secrets-operator/values.yaml |   4 +-
 controllers/sopssecret_controller.go          | 543 ++++++++++--------
 docs/index.yaml                               | 138 +++--
 docs/sops-secrets-operator-0.10.6.tgz         | Bin 0 -> 11265 bytes
 go.mod                                        |  12 +-
 go.sum                                        |  45 +-
 15 files changed, 433 insertions(+), 379 deletions(-)
 create mode 100644 docs/sops-secrets-operator-0.10.6.tgz

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 20bf6bc5..486d0dd4 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -17,15 +17,15 @@ jobs:
       image: ubuntu-2004:202111-02
     environment: &versions
       # https://github.com/kubernetes/kubernetes/releases
-      KUBECTL_VERSION: v1.23.1
+      KUBECTL_VERSION: v1.23.3
       # https://hub.docker.com/r/rancher/k3s/tags
-      K3S_VERSION: v1.22.5-k3s1
+      K3S_VERSION: v1.23.3-k3s1
       # https://github.com/rancher/k3d/releases
       K3D_VERSION: v4.4.8
       # https://github.com/helm/helm/releases
       HELM_VERSION: v3.8.1
       # https://golang.org/dl/
-      GOLANG_VERSION: "1.17.8"
+      GOLANG_VERSION: "1.18"
       # https://github.com/kubernetes-sigs/kubebuilder/releases
       KUBEBUILDER_VERSION: 3.3.0
       # https://github.com/mozilla/sops/releases
@@ -41,7 +41,7 @@ jobs:
       # https://github.com/git-chglog/git-chglog/releases
       GIT_CHGLOG_VERSION: 0.15.1
       # https://github.com/docker/buildx/releases
-      BUILDX_BINARY_VERSION: 0.8.0
+      BUILDX_BINARY_VERSION: 0.8.1
 
       DOCKER_BUILDKIT: 1
       BUILDX_PLATFORMS: linux/amd64,linux/arm64
@@ -235,27 +235,17 @@ jobs:
             kubectl describe node k3d-operator-server-0
             kubectl describe node k3d-operator-agent-0
       - run:
-          name: make test
+          name: Unit tests and envtest integration tests
           command: |
             make test
-      # run helm tests
+      # helm tests
       - run:
           name: Test helm charts
           command: |
             make test-helm
+      # k3d integration tests
       - run:
-          name: Docker build
-          command: |
-            make docker-login
-            make docker-cross-build
-          no_output_timeout: 1h
-      - save_cache:
-          key: v2-modules-{{ .Branch }}-{{ checksum "go.sum" }}
-          paths:
-            - "/home/circleci/gogo/pkg"
-      # tests start here
-      - run:
-          name: Run Local Tests
+          name: In cluster integration tests
           command: |
             export GNUPGHOME="$(mktemp -d)"
             cat >$GNUPGHOME/foo <<EOF
@@ -346,6 +336,16 @@ jobs:
               exit 1
             fi
             rm -fr $GNUPGHOME
+      - run:
+          name: Docker build
+          command: |
+            make docker-login
+            make docker-cross-build
+          no_output_timeout: 1h
+      - save_cache:
+          key: v2-modules-{{ .Branch }}-{{ checksum "go.sum" }}
+          paths:
+            - "/home/circleci/gogo/pkg"
 
 workflows:
   version: 2
diff --git a/.tool-versions b/.tool-versions
index 1d7ca58c..c6be57ea 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -2,7 +2,7 @@
 # https://github.com/kubernetes-sigs/kubebuilder/releases
 kubebuilder 3.3.0
 # https://golang.org/dl/
-golang 1.17.8
+golang 1.18
 # https://github.com/mozilla/sops/releases
 sops 3.7.2
 # https://github.com/kubernetes-sigs/kustomize/releases
@@ -10,7 +10,7 @@ kustomize 4.5.2
 # https://github.com/rancher/k3d/releases
 k3d 4.4.8
 # https://github.com/kubernetes/kubernetes/releases
-kubectl 1.23.1
+kubectl 1.23.3
 # https://github.com/helm/helm/releases
 helm 3.8.1
 # https://github.com/norwoodj/helm-docs/releases
diff --git a/Dockerfile b/Dockerfile
index 4b1be44f..6bb4a347 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@
 # Build the manager binary
 # https://www.debian.org/releases/
 # https://hub.docker.com/_/golang?tab=tags&page=1&ordering=last_updated
-FROM golang:1.17.8-bullseye as builder
+FROM golang:1.18-bullseye as builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests
@@ -22,7 +22,7 @@ RUN CGO_ENABLED=0 GO111MODULE=on go build -a -o manager main.go
 
 # https://wiki.ubuntu.com/Releases
 # https://hub.docker.com/_/ubuntu?tab=tags&page=1&ordering=last_updated
-FROM ubuntu:focal-20220302
+FROM ubuntu:focal-20220316
 
 RUN apt-get -y update \
       && apt-get -y upgrade \
diff --git a/Makefile b/Makefile
index 8f9880fa..bece2856 100644
--- a/Makefile
+++ b/Makefile
@@ -1,6 +1,6 @@
 # UPDATE_HERE
 GO := GOPROXY=https://proxy.golang.org go
-SOPS_SEC_OPERATOR_VERSION := 0.4.5
+SOPS_SEC_OPERATOR_VERSION := 0.4.6
 
 # https://github.com/kubernetes-sigs/controller-tools/releases
 CONTROLLER_GEN_VERSION := "v0.8.0"
@@ -12,7 +12,7 @@ KUSTOMIZE_VERSION := "v4.5.2"
 # until fixed, can't use newer version, see:
 #   https://github.com/kubernetes-sigs/controller-runtime/issues/1571
 # ENVTEST_K8S_VERSION refers to the version of kubebuilder assets to be downloaded by envtest binary.
-ENVTEST_K8S_VERSION := "1.22.1"
+ENVTEST_K8S_VERSION := "1.23.3"
 
 # Use existing cluster instead of starting processes
 USE_EXISTING_CLUSTER ?= true
@@ -221,7 +221,7 @@ controller-gen: ## Download controller-gen locally if necessary.
 KUSTOMIZE = $(shell pwd)/bin/kustomize
 .PHONY: kustomize
 kustomize: ## Download kustomize locally if necessary.
-	$(call go-get-tool,$(KUSTOMIZE),sigs.k8s.io/kustomize/kustomize/v4@${KUSTOMIZE_VERSION})
+	$(call go-install-tool,$(KUSTOMIZE),sigs.k8s.io/kustomize/kustomize/v4@${KUSTOMIZE_VERSION})
 
 ENVTEST = $(shell pwd)/bin/setup-envtest
 .PHONY: envtest
diff --git a/README.md b/README.md
index 2d6eec15..b2305fce 100644
--- a/README.md
+++ b/README.md
@@ -23,7 +23,7 @@ encrypted files stored in `git` repository.
 
 | Kubernetes | Sops | Chart | Operator |
 |---|---|---|---|
-| v1.23.x | v3.7.2 | 0.10.5 | 0.4.5 |
+| v1.23.x | v3.7.2 | 0.10.6 | 0.4.6 |
 | v1.22.x | v3.7.1 | 0.9.7 | 0.3.7 |
 | v1.21.x | v3.7.1 | 0.9.6 | 0.3.6 |
 
diff --git a/chart/helm3/sops-secrets-operator/Chart.yaml b/chart/helm3/sops-secrets-operator/Chart.yaml
index 7218c7b9..60565548 100644
--- a/chart/helm3/sops-secrets-operator/Chart.yaml
+++ b/chart/helm3/sops-secrets-operator/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 # UPDATE_HERE
-version: 0.10.5
-appVersion: 0.4.5
+version: 0.10.6
+appVersion: 0.4.6
 type: application
 description: Helm chart deploys sops-secrets-operator
 name: sops-secrets-operator
diff --git a/chart/helm3/sops-secrets-operator/Makefile b/chart/helm3/sops-secrets-operator/Makefile
index 62d804b2..b0480d5e 100644
--- a/chart/helm3/sops-secrets-operator/Makefile
+++ b/chart/helm3/sops-secrets-operator/Makefile
@@ -4,7 +4,7 @@ CHART_NAME?=$(shell cat Chart.yaml | awk 'BEGIN { FS=": " } $$0~/^name:/ { gsub(
 VERSION_TAG?=$(shell cat Chart.yaml | awk 'BEGIN { FS=": " } $$0~/^version/ { gsub(/['\'',]/, ""); print $$2; }')
 
 # UPDATE_HERE
-K8S_VERSION := "1.23.1"
+K8S_VERSION := "1.23.3"
 
 SHELL=/bin/bash
 
diff --git a/chart/helm3/sops-secrets-operator/README.md b/chart/helm3/sops-secrets-operator/README.md
index 1a6dde6b..df88ed41 100644
--- a/chart/helm3/sops-secrets-operator/README.md
+++ b/chart/helm3/sops-secrets-operator/README.md
@@ -132,11 +132,11 @@ The following table lists the configurable parameters of the Sops-secrets-operat
 | healthProbes.readiness | object | `{"initialDelaySeconds":5,"periodSeconds":10}` | Readiness probe configuration |
 | image.pullPolicy | string | `"Always"` | Operator image pull policy |
 | image.repository | string | `"isindir/sops-secrets-operator"` | Operator image name |
-| image.tag | string | `"0.4.5"` | Operator image tag |
+| image.tag | string | `"0.4.6"` | Operator image tag |
 | imagePullSecrets | list | `[]` | Secrets to pull image from private docker repository |
 | initImage.pullPolicy | string | `"Always"` | Init container image pull policy |
 | initImage.repository | string | `"ubuntu"` | Init container image name |
-| initImage.tag | string | `"focal-20220113"` | Init container image tag |
+| initImage.tag | string | `"focal-20220316"` | Init container image tag |
 | kubeconfig | object | `{"enabled":false,"path":null}` | Paths to a kubeconfig. Only required if out-of-cluster. |
 | logging | object | `{"encoder":"json","level":"info","stacktraceLevel":"error"}` | Logging configuration section suggested values Development Mode (encoder=consoleEncoder,logLevel=Debug,stackTraceLevel=Warn). Production Mode (encoder=jsonEncoder,logLevel=Info,stackTraceLevel=Error) (default) |
 | logging.encoder | string | `"json"` | Zap log encoding (one of 'json' or 'console') |
diff --git a/chart/helm3/sops-secrets-operator/tests/operator_test.yaml b/chart/helm3/sops-secrets-operator/tests/operator_test.yaml
index a4bfa6c7..a535b3fa 100644
--- a/chart/helm3/sops-secrets-operator/tests/operator_test.yaml
+++ b/chart/helm3/sops-secrets-operator/tests/operator_test.yaml
@@ -31,8 +31,8 @@ tests:
             app.kubernetes.io/instance: sops
             app.kubernetes.io/managed-by: Helm
             app.kubernetes.io/name: sops-secrets-operator
-            app.kubernetes.io/version: 0.4.5
-            helm.sh/chart: sops-secrets-operator-0.10.5
+            app.kubernetes.io/version: 0.4.6
+            helm.sh/chart: sops-secrets-operator-0.10.6
 
   # custom name
   - it: should correctly render custome name
@@ -171,7 +171,7 @@ tests:
       # UPDATE_HERE
       - equal:
           path: spec.template.spec.containers[0].image
-          value: isindir/sops-secrets-operator:0.4.5
+          value: isindir/sops-secrets-operator:0.4.6
       - equal:
           path: spec.template.spec.containers[0].imagePullPolicy
           value: Always
@@ -199,7 +199,7 @@ tests:
       - equal:
           path: spec.template.spec.initContainers[0].image
           # UPDATE_HERE
-          value: ubuntu:focal-20220113
+          value: ubuntu:focal-20220316
       - equal:
           path: spec.template.spec.initContainers[0].imagePullPolicy
           value: Always
diff --git a/chart/helm3/sops-secrets-operator/values.yaml b/chart/helm3/sops-secrets-operator/values.yaml
index 51dedc33..455761bc 100644
--- a/chart/helm3/sops-secrets-operator/values.yaml
+++ b/chart/helm3/sops-secrets-operator/values.yaml
@@ -13,7 +13,7 @@ image:
   # -- Operator image name
   repository: isindir/sops-secrets-operator
   # -- Operator image tag
-  tag: 0.4.5
+  tag: 0.4.6
   # -- Operator image pull policy
   pullPolicy: Always
 
@@ -22,7 +22,7 @@ initImage:
   # -- Init container image name
   repository: ubuntu
   # -- Init container image tag
-  tag: focal-20220113
+  tag: focal-20220316
   # -- Init container image pull policy
   pullPolicy: Always
 
diff --git a/controllers/sopssecret_controller.go b/controllers/sopssecret_controller.go
index bd641af9..f01889f7 100644
--- a/controllers/sopssecret_controller.go
+++ b/controllers/sopssecret_controller.go
@@ -58,195 +58,264 @@ func (r *SopsSecretReconciler) Reconcile(ctx context.Context, req ctrl.Request)
 
 	r.Log.Info("Reconciling", "sopssecret", req.NamespacedName)
 
-	instanceEncrypted := &isindirv1alpha3.SopsSecret{}
-	err := r.Get(ctx, req.NamespacedName, instanceEncrypted)
+	encryptedSopsSecret, finishReconcileLoop, err := r.getEncryptedSopsSecret(ctx, req)
+	if finishReconcileLoop {
+		return reconcile.Result{}, err
+	}
+
+	if r.isSecretSuspended(encryptedSopsSecret, req) {
+		return reconcile.Result{}, nil
+	}
+
+	plainTextSopsSecret, rescheduleReconcileLoop := r.decryptSopsSecret(encryptedSopsSecret)
+	if rescheduleReconcileLoop {
+		return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
+	}
+
+	// Iterate over secret templates
+	r.Log.Info("Entering template data loop", "sopssecret", req.NamespacedName)
+	for _, secretTemplate := range plainTextSopsSecret.Spec.SecretsTemplate {
+
+		kubeSecretFromTemplate, rescheduleReconcileLoop := r.newKubeSecretFromTemplate(req, encryptedSopsSecret, plainTextSopsSecret, &secretTemplate)
+		if rescheduleReconcileLoop {
+			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
+		}
+
+		kubeSecretInCluster, rescheduleReconcileLoop := r.getSecretFromClusterOrCreateFromTemplate(ctx, req, encryptedSopsSecret, kubeSecretFromTemplate)
+		if rescheduleReconcileLoop {
+			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
+		}
+
+		rescheduleReconcileLoop = r.isKubeSecretManagedOrAnnotatedToBeManaged(req, encryptedSopsSecret, kubeSecretInCluster)
+		if rescheduleReconcileLoop {
+			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
+		}
+
+		rescheduleReconcileLoop = r.refreshKubeSecretIfNeeded(ctx, req, encryptedSopsSecret, kubeSecretFromTemplate, kubeSecretInCluster)
+		if rescheduleReconcileLoop {
+			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
+		}
+	}
+
+	encryptedSopsSecret.Status.Message = "Healthy"
+	r.Status().Update(context.Background(), encryptedSopsSecret)
+
+	r.Log.Info("SopsSecret is Healthy", "sopssecret", req.NamespacedName)
+	return ctrl.Result{}, nil
+}
+
+func (r *SopsSecretReconciler) decryptSopsSecret(
+	encryptedSopsSecret *isindirv1alpha3.SopsSecret,
+) (*isindirv1alpha3.SopsSecret, bool) {
+	decryptedSopsSecret, err := decryptSopsSecretInstance(encryptedSopsSecret, r.Log)
 	if err != nil {
-		if errors.IsNotFound(err) {
-			// Request object not found, could have been deleted after reconcile request.
-			// Owned objects are automatically garbage collected. For additional cleanup logic use finalizers.
-			// Return and don't requeue
+		encryptedSopsSecret.Status.Message = "Decryption error"
+
+		// will not process plainTextSopsSecret error as we are already in error mode here
+		r.Status().Update(context.Background(), encryptedSopsSecret)
+
+		// Failed to decrypt, re-schedule reconciliation in 5 minutes
+		return nil, true
+	}
+	return decryptedSopsSecret, false
+}
+
+func (r *SopsSecretReconciler) isKubeSecretManagedOrAnnotatedToBeManaged(
+	req ctrl.Request,
+	encryptedSopsSecret *isindirv1alpha3.SopsSecret,
+	kubeSecretInCluster *corev1.Secret,
+) bool {
+	// kubeSecretFromTemplate found - perform ownership check
+	if !metav1.IsControlledBy(kubeSecretInCluster, encryptedSopsSecret) && !isAnnotatedToBeManaged(kubeSecretInCluster) {
+		encryptedSopsSecret.Status.Message = "Child secret is not owned by controller error"
+		r.Status().Update(context.Background(), encryptedSopsSecret)
+
+		r.Log.Info(
+			"Child secret is not owned by controller or sopssecret Error",
+			"sopssecret", req.NamespacedName,
+			"error", fmt.Errorf("sopssecret has a conflict with existing kubernetes secret resource, potential reasons: target secret already pre-existed or is managed by multiple sops secrets"),
+		)
+		return true
+	}
+	return false
+}
+
+func (r *SopsSecretReconciler) refreshKubeSecretIfNeeded(
+	ctx context.Context,
+	req ctrl.Request,
+	encryptedSopsSecret *isindirv1alpha3.SopsSecret,
+	kubeSecretFromTemplate *corev1.Secret,
+	kubeSecretInCluster *corev1.Secret,
+) bool {
+	copyOfKubeSecretInCluster := kubeSecretInCluster.DeepCopy()
+
+	copyOfKubeSecretInCluster.StringData = kubeSecretFromTemplate.StringData
+	copyOfKubeSecretInCluster.Data = map[string][]byte{}
+	copyOfKubeSecretInCluster.Type = kubeSecretFromTemplate.Type
+	copyOfKubeSecretInCluster.ObjectMeta.Annotations = kubeSecretFromTemplate.ObjectMeta.Annotations
+	copyOfKubeSecretInCluster.ObjectMeta.Labels = kubeSecretFromTemplate.ObjectMeta.Labels
+
+	if isAnnotatedToBeManaged(kubeSecretInCluster) {
+		copyOfKubeSecretInCluster.ObjectMeta.OwnerReferences = kubeSecretFromTemplate.ObjectMeta.OwnerReferences
+	}
+
+	if !apiequality.Semantic.DeepEqual(kubeSecretInCluster, copyOfKubeSecretInCluster) {
+		r.Log.Info(
+			"Secret already exists and needs to be refreshed",
+			"secret", copyOfKubeSecretInCluster.Name,
+			"namespace", copyOfKubeSecretInCluster.Namespace,
+		)
+		if err := r.Update(ctx, copyOfKubeSecretInCluster); err != nil {
+			encryptedSopsSecret.Status.Message = "Child secret update error"
+			r.Status().Update(context.Background(), encryptedSopsSecret)
+
 			r.Log.Info(
-				"Request object not found, could have been deleted after reconcile request",
-				"sopssecret",
-				req.NamespacedName,
+				"Child secret update error",
+				"sopssecret", req.NamespacedName,
+				"error", err,
 			)
-			return reconcile.Result{}, nil
+			return true
 		}
+		r.Log.Info(
+			"Secret successfully refreshed",
+			"secret", copyOfKubeSecretInCluster.Name,
+			"namespace", copyOfKubeSecretInCluster.Namespace,
+		)
+	}
+	return false
+}
 
-		// Error reading the object - requeue the request.
+func (r *SopsSecretReconciler) getSecretFromClusterOrCreateFromTemplate(
+	ctx context.Context,
+	req ctrl.Request,
+	encryptedSopsSecret *isindirv1alpha3.SopsSecret,
+	kubeSecretFromTemplate *corev1.Secret,
+) (*corev1.Secret, bool) {
+
+	// Check if kubeSecretFromTemplate already exists in the cluster store
+	kubeSecretToFindAndCompare := &corev1.Secret{}
+	err := r.Get(
+		ctx,
+		types.NamespacedName{
+			Name:      kubeSecretFromTemplate.Name,
+			Namespace: kubeSecretFromTemplate.Namespace,
+		},
+		kubeSecretToFindAndCompare,
+	)
+
+	// No kubeSecretFromTemplate alike found - CREATE one
+	if errors.IsNotFound(err) {
 		r.Log.Info(
-			"Error reading the object",
-			"sopssecret",
-			req.NamespacedName,
+			"Creating a new Secret",
+			"sopssecret", req.NamespacedName,
+			"message", err,
 		)
-		return reconcile.Result{}, err
+		err = r.Create(ctx, kubeSecretFromTemplate)
+		kubeSecretToFindAndCompare = kubeSecretFromTemplate.DeepCopy()
 	}
 
-	// Return early if the object is suspended.
-	if instanceEncrypted.Spec.Suspend {
+	// Unknown error while trying to find kubeSecretFromTemplate in cluster - reschedule reconciliation
+	if err != nil {
+		encryptedSopsSecret.Status.Message = "Unknown Error"
+		r.Status().Update(context.Background(), encryptedSopsSecret)
+
 		r.Log.Info(
-			"Reconciliation is suspended for this object",
-			"sopssecret",
-			req.NamespacedName,
+			"Unknown Error",
+			"sopssecret", req.NamespacedName,
+			"error", err,
 		)
+		return nil, true
+	}
 
-		instanceEncrypted.Status.Message = "Reconciliation is suspended"
-		r.Status().Update(context.Background(), instanceEncrypted)
+	return kubeSecretToFindAndCompare, false
+}
 
-		return reconcile.Result{}, nil
+func (r *SopsSecretReconciler) newKubeSecretFromTemplate(
+	req ctrl.Request,
+	encryptedSopsSecret *isindirv1alpha3.SopsSecret,
+	plainTextSopsSecret *isindirv1alpha3.SopsSecret,
+	secretTemplate *isindirv1alpha3.SopsSecretTemplate,
+) (*corev1.Secret, bool) {
+
+	// Define a new secret object
+	kubeSecretFromTemplate, err := createKubeSecretFromTemplate(plainTextSopsSecret, secretTemplate, r.Log)
+	if err != nil {
+		encryptedSopsSecret.Status.Message = "New child secret creation error"
+		r.Status().Update(context.Background(), encryptedSopsSecret)
+
+		r.Log.Info(
+			"New child secret creation error",
+			"sopssecret", req.NamespacedName,
+			"error", err,
+		)
+		return nil, true
 	}
 
-	instance, err := decryptSopsSecretInstance(instanceEncrypted, r.Log)
+	// Set encryptedSopsSecret as the owner of kubeSecret
+	err = controllerutil.SetControllerReference(encryptedSopsSecret, kubeSecretFromTemplate, r.Scheme)
 	if err != nil {
-		//instance.Status.SecretsTotal = len(instance.Spec.SecretsTemplate)
-		instanceEncrypted.Status.Message = "Decryption error"
+		encryptedSopsSecret.Status.Message = "Setting controller ownership of the child secret error"
+		r.Status().Update(context.Background(), encryptedSopsSecret)
 
-		// will not process instance error as we are already in error mode here
-		r.Status().Update(context.Background(), instanceEncrypted)
+		r.Log.Info(
+			"Setting controller ownership of the child secret error",
+			"sopssecret", req.NamespacedName,
+			"error", err,
+		)
 
-		// Failed to decrypt, re-schedule reconciliation in 5 minutes
-		return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
+		return nil, true
 	}
 
-	// iterating over secret templates
-	r.Log.Info("Entering template data loop", "sopssecret", req.NamespacedName)
-	for _, secretTemplateValue := range instance.Spec.SecretsTemplate {
-		// Define a new secret object
-		newSecret, err := newSecretForCR(instance, &secretTemplateValue, r.Log)
-		if err != nil {
-			instanceEncrypted.Status.Message = "New child secret creation error"
-			r.Status().Update(context.Background(), instanceEncrypted)
+	return kubeSecretFromTemplate, false
+}
 
-			r.Log.Info(
-				"New child secret creation error",
-				"sopssecret",
-				req.NamespacedName,
-				"error",
-				err,
-			)
-			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
-		}
+func (r *SopsSecretReconciler) isSecretSuspended(
+	encryptedSopsSecret *isindirv1alpha3.SopsSecret, req ctrl.Request) bool {
 
-		// Set SopsSecret instance as the owner and controller
-		if err := controllerutil.SetControllerReference(
-			instance,
-			newSecret,
-			r.Scheme,
-		); err != nil {
-			instanceEncrypted.Status.Message = "Setting controller ownership of the child secret error"
-			r.Status().Update(context.Background(), instanceEncrypted)
+	// Return early if SopsSecret object is suspended.
+	if encryptedSopsSecret.Spec.Suspend {
+		r.Log.Info(
+			"Reconciliation is suspended for this object",
+			"sopssecret", req.NamespacedName,
+		)
 
-			r.Log.Info(
-				"Setting controller ownership of the child secret error",
-				"sopssecret",
-				req.NamespacedName,
-				"error",
-				err,
-			)
-			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
-		}
+		encryptedSopsSecret.Status.Message = "Reconciliation is suspended"
+		r.Status().Update(context.Background(), encryptedSopsSecret)
 
-		// Check if this Secret already exists
-		foundSecret := &corev1.Secret{}
-		err = r.Get(
-			ctx,
-			types.NamespacedName{
-				Name:      newSecret.Name,
-				Namespace: newSecret.Namespace,
-			},
-			foundSecret,
-		)
-		if errors.IsNotFound(err) {
-			r.Log.Info(
-				"Creating a new Secret",
-				"sopssecret",
-				req.NamespacedName,
-				"message",
-				err,
-			)
-			err = r.Create(ctx, newSecret)
-			foundSecret = newSecret.DeepCopy()
-		}
-		if err != nil {
-			instanceEncrypted.Status.Message = "Unknown Error"
-			r.Status().Update(context.Background(), instanceEncrypted)
+		return true
+	}
 
-			r.Log.Info(
-				"Unknown Error",
-				"sopssecret",
-				req.NamespacedName,
-				"error",
-				err,
-			)
-			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
-		}
+	return false
+}
 
-		if !metav1.IsControlledBy(foundSecret, instance) && !isAnnotatedToBeManaged(foundSecret) {
-			instanceEncrypted.Status.Message = "Child secret is not owned by controller error"
-			r.Status().Update(context.Background(), instanceEncrypted)
+func (r *SopsSecretReconciler) getEncryptedSopsSecret(
+	ctx context.Context, req ctrl.Request) (*isindirv1alpha3.SopsSecret, bool, error) {
 
+	encryptedSopsSecret := &isindirv1alpha3.SopsSecret{}
+
+	err := r.Get(ctx, req.NamespacedName, encryptedSopsSecret)
+	if err != nil {
+		if errors.IsNotFound(err) {
+			// Request object not found, could have been deleted after reconcile request.
+			// Owned objects are automatically garbage collected. For additional cleanup logic use finalizers.
+			// Return and don't requeue
 			r.Log.Info(
-				"Child secret is not owned by controller or sopssecret Error",
+				"Request object not found, could have been deleted after reconcile request",
 				"sopssecret",
 				req.NamespacedName,
-				"error",
-				fmt.Errorf("sopssecret has a conflict with existing kubernetes secret resource, potential reasons: target secret already pre-existed or is managed by multiple sops secrets"),
 			)
-			return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
+			return nil, true, nil
 		}
 
-		origSecret := foundSecret
-		foundSecret = foundSecret.DeepCopy()
-
-		foundSecret.StringData = newSecret.StringData
-		foundSecret.Data = map[string][]byte{}
-		foundSecret.Type = newSecret.Type
-		foundSecret.ObjectMeta.Annotations = newSecret.ObjectMeta.Annotations
-		foundSecret.ObjectMeta.Labels = newSecret.ObjectMeta.Labels
-		if isAnnotatedToBeManaged(origSecret) {
-			foundSecret.ObjectMeta.OwnerReferences = newSecret.ObjectMeta.OwnerReferences
-		}
-
-		if !apiequality.Semantic.DeepEqual(origSecret, foundSecret) {
-			r.Log.Info(
-				"Secret already exists and needs to be refreshed",
-				"secret",
-				foundSecret.Name,
-				"namespace",
-				foundSecret.Namespace,
-			)
-			if err = r.Update(ctx, foundSecret); err != nil {
-				instanceEncrypted.Status.Message = "Child secret update error"
-				r.Status().Update(context.Background(), instanceEncrypted)
-
-				r.Log.Info(
-					"Child secret update error",
-					"sopssecret",
-					req.NamespacedName,
-					"error",
-					err,
-				)
-				return reconcile.Result{Requeue: true, RequeueAfter: time.Duration(r.RequeueAfter) * time.Minute}, nil
-			}
-			r.Log.Info(
-				"Secret successfully refreshed",
-				"secret",
-				foundSecret.Name,
-				"namespace",
-				foundSecret.Namespace,
-			)
-		}
+		// Error reading the object - requeue the request.
+		r.Log.Info(
+			"Error reading the object",
+			"sopssecret",
+			req.NamespacedName,
+		)
+		return nil, true, err
 	}
-
-	instanceEncrypted.Status.Message = "Healthy"
-	r.Status().Update(context.Background(), instanceEncrypted)
-
-	r.Log.Info(
-		"SopsSecret is Healthy",
-		"sopssecret",
-		req.NamespacedName,
-	)
-	return ctrl.Result{}, nil
+	return encryptedSopsSecret, false, nil
 }
 
 // checks if the annotation equals to "true", and it's case sensitive
@@ -271,62 +340,36 @@ func (r *SopsSecretReconciler) SetupWithManager(mgr ctrl.Manager) error {
 		Complete(r)
 }
 
-// newSecretForCR returns a secret with the same namespace as the cr
-func newSecretForCR(
-	cr *isindirv1alpha3.SopsSecret,
-	secretTpl *isindirv1alpha3.SopsSecretTemplate,
-	reqLogger logr.Logger,
+// createKubeSecretFromTemplate returns new Kubernetes secret object, created from decrypted SopsSecret Template
+func createKubeSecretFromTemplate(
+	sopsSecret *isindirv1alpha3.SopsSecret,
+	sopsSecretTemplate *isindirv1alpha3.SopsSecretTemplate,
+	logger logr.Logger,
 ) (*corev1.Secret, error) {
-	labels := make(map[string]string)
-	for key, value := range secretTpl.Labels {
-		labels[key] = value
-	}
-
-	// Construct annotations for the secret
-	annotations := make(map[string]string)
-	for key, value := range secretTpl.Annotations {
-		annotations[key] = value
+	if sopsSecretTemplate.Name == "" {
+		return nil, fmt.Errorf("createKubeSecretFromTemplate(): secret template name must be specified and not empty string")
 	}
 
-	// Construct stringData for the secret
-	strData := make(map[string]string)
-	for key, value := range secretTpl.StringData {
-		strData[key] = value
-	}
-	// add data to stringData
-	for key, value := range secretTpl.Data {
-		decoded, err := base64.StdEncoding.DecodeString(value)
-		if err != nil {
-			return nil, fmt.Errorf("newSecretForCR(): data[%v] is not a valid base64 string", key)
-		}
-		strData[key] = string(decoded)
+	strData, err := cloneTemplateData(sopsSecretTemplate.StringData, sopsSecretTemplate.Data)
+	if err != nil {
+		return nil, err
 	}
 
-	if secretTpl.Name == "" {
-		return nil, fmt.Errorf("newSecretForCR(): secret template name must be specified and not empty string")
-	}
+	kubeSecretType := getSecretType(sopsSecretTemplate.Type)
+	labels := cloneMap(sopsSecretTemplate.Labels)
+	annotations := cloneMap(sopsSecretTemplate.Annotations)
 
-	reqLogger.Info("Processing", "sopssecret",
-		fmt.Sprintf(
-			"%s.%s.%s",
-			cr.Kind,
-			cr.APIVersion,
-			cr.Name,
-		),
-		"type",
-		secretTpl.Type,
-		"namespace", cr.Namespace,
-		"templateItem",
-		fmt.Sprintf("secret/%s", secretTpl.Name),
+	logger.Info("Processing",
+		"sopssecret", fmt.Sprintf("%s.%s.%s", sopsSecret.Kind, sopsSecret.APIVersion, sopsSecret.Name),
+		"type", sopsSecretTemplate.Type,
+		"namespace", sopsSecret.Namespace,
+		"templateItem", fmt.Sprintf("secret/%s", sopsSecretTemplate.Name),
 	)
 
-	kubeSecretType := getSecretType(secretTpl.Type)
-
-	// return resulting secret
 	secret := &corev1.Secret{
 		ObjectMeta: metav1.ObjectMeta{
-			Name:        secretTpl.Name,
-			Namespace:   cr.Namespace,
+			Name:        sopsSecretTemplate.Name,
+			Namespace:   sopsSecret.Namespace,
 			Labels:      labels,
 			Annotations: annotations,
 		},
@@ -336,77 +379,91 @@ func newSecretForCR(
 	return secret, nil
 }
 
-func getSecretType(paramType string) corev1.SecretType {
-	// by default secret type is Opaque
-	kubeSecretType := corev1.SecretTypeOpaque
-	if paramType == "kubernetes.io/service-account-token" {
-		kubeSecretType = corev1.SecretTypeServiceAccountToken
+func cloneMap(oldMap map[string]string) map[string]string {
+	newMap := make(map[string]string)
+
+	for key, value := range oldMap {
+		newMap[key] = value
 	}
-	if paramType == "kubernetes.io/dockercfg" {
-		kubeSecretType = corev1.SecretTypeDockercfg
+
+	return newMap
+}
+
+// add both StringData and Data to strData
+func cloneTemplateData(stringData map[string]string, data map[string]string) (map[string]string, error) {
+	strData := cloneMap(stringData)
+	for key, value := range data {
+		decoded, err := base64.StdEncoding.DecodeString(value)
+		if err != nil {
+			return nil, fmt.Errorf("createKubeSecretFromTemplate(): data[%v] is not a valid base64 string", key)
+		}
+		strData[key] = string(decoded)
 	}
-	if paramType == "kubernetes.io/dockerconfigjson" {
+	return strData, nil
+}
+
+func getSecretType(templateSecretType string) corev1.SecretType {
+	var kubeSecretType corev1.SecretType
+
+	switch templateSecretType {
+	case "kubernetes.io/service-account-token":
+		kubeSecretType = corev1.SecretTypeServiceAccountToken
+	case "kubernetes.io/dockercfg":
+		kubeSecretType = corev1.SecretTypeDockercfg
+	case "kubernetes.io/dockerconfigjson":
 		kubeSecretType = corev1.SecretTypeDockerConfigJson
-	}
-	if paramType == "kubernetes.io/basic-auth" {
+	case "kubernetes.io/basic-auth":
 		kubeSecretType = corev1.SecretTypeBasicAuth
-	}
-	if paramType == "kubernetes.io/ssh-auth" {
+	case "kubernetes.io/ssh-auth":
 		kubeSecretType = corev1.SecretTypeSSHAuth
-	}
-	if paramType == "kubernetes.io/tls" {
+	case "kubernetes.io/tls":
 		kubeSecretType = corev1.SecretTypeTLS
-	}
-	if paramType == "bootstrap.kubernetes.io/token" {
+	case "bootstrap.kubernetes.io/token":
 		kubeSecretType = corev1.SecretTypeBootstrapToken
+	default:
+		kubeSecretType = corev1.SecretTypeOpaque
 	}
+
 	return kubeSecretType
 }
 
 // decryptSopsSecretInstance decrypts spec.secretTemplates
 func decryptSopsSecretInstance(
-	instanceEncrypted *isindirv1alpha3.SopsSecret,
-	reqLogger logr.Logger,
+	encryptedSopsSecret *isindirv1alpha3.SopsSecret,
+	logger logr.Logger,
 ) (*isindirv1alpha3.SopsSecret, error) {
-	instance := &isindirv1alpha3.SopsSecret{}
-	reqBodyBytes, err := json.Marshal(instanceEncrypted)
+	sopsSecretAsBytes, err := json.Marshal(encryptedSopsSecret)
 	if err != nil {
-		reqLogger.Info(
+		logger.Info(
 			"Failed to convert encrypted sops secret to bytes[]",
-			"sopssecret",
-			fmt.Sprintf("%s/%s", instanceEncrypted.Namespace, instanceEncrypted.Name),
-			"error",
-			err,
+			"sopssecret", fmt.Sprintf("%s/%s", encryptedSopsSecret.Namespace, encryptedSopsSecret.Name),
+			"error", err,
 		)
 		return nil, err
 	}
 
-	decryptedInstanceBytes, err := customDecryptData(reqBodyBytes, "json")
+	decryptedSopsSecretAsBytes, err := customDecryptData(sopsSecretAsBytes, "json")
 	if err != nil {
-		reqLogger.Info(
-			"Failed to Decrypt encrypted sops secret instance",
-			"sopssecret",
-			fmt.Sprintf("%s/%s", instanceEncrypted.Namespace, instanceEncrypted.Name),
-			"error",
-			err,
+		logger.Info(
+			"Failed to Decrypt encrypted sops secret decryptedSopsSecret",
+			"sopssecret", fmt.Sprintf("%s/%s", encryptedSopsSecret.Namespace, encryptedSopsSecret.Name),
+			"error", err,
 		)
 		return nil, err
 	}
 
-	// Decrypted instance is empty structure here
-	err = json.Unmarshal(decryptedInstanceBytes, &instance)
+	decryptedSopsSecret := &isindirv1alpha3.SopsSecret{}
+	err = json.Unmarshal(decryptedSopsSecretAsBytes, &decryptedSopsSecret)
 	if err != nil {
-		reqLogger.Info(
-			"Failed to Unmarshal decrypted sops secret instance",
-			"sopssecret",
-			fmt.Sprintf("%s/%s", instanceEncrypted.Namespace, instanceEncrypted.Name),
-			"error",
-			err,
+		logger.Info(
+			"Failed to Unmarshal decrypted sops secret decryptedSopsSecret",
+			"sopssecret", fmt.Sprintf("%s/%s", encryptedSopsSecret.Namespace, encryptedSopsSecret.Name),
+			"error", err,
 		)
 		return nil, err
 	}
 
-	return instance, nil
+	return decryptedSopsSecret, nil
 }
 
 // Data is a helper that takes encrypted data and a format string,
@@ -418,6 +475,7 @@ func decryptSopsSecretInstance(
 func customDecryptData(data []byte, format string) (cleartext []byte, err error) {
 	// Initialize a Sops JSON store
 	var store sops.Store
+
 	switch format {
 	case "json":
 		store = &sopsjson.Store{}
@@ -428,6 +486,7 @@ func customDecryptData(data []byte, format string) (cleartext []byte, err error)
 	default:
 		store = &sopsjson.BinaryStore{}
 	}
+
 	// Load SOPS file and access the data key
 	tree, err := store.LoadEncryptedFile(data)
 	if err != nil {
diff --git a/docs/index.yaml b/docs/index.yaml
index be2ae589..4f4a3daf 100644
--- a/docs/index.yaml
+++ b/docs/index.yaml
@@ -1,9 +1,29 @@
 apiVersion: v1
 entries:
   sops-secrets-operator:
+  - apiVersion: v2
+    appVersion: 0.4.6
+    created: "2022-03-23T16:51:53.624145Z"
+    description: Helm chart deploys sops-secrets-operator
+    digest: 8e580ee17f943fa52a3bd06f9a7f2236b4b19dd6c85cfea6593a4fa18513ba52
+    keywords:
+    - gitops
+    - sops
+    - kms
+    - encryption
+    maintainers:
+    - email: isindir@users.sf.net
+      name: isindir
+    name: sops-secrets-operator
+    sources:
+    - https://github.com/isindir/sops-secrets-operator.git
+    type: application
+    urls:
+    - https://isindir.github.io/sops-secrets-operator/sops-secrets-operator-0.10.6.tgz
+    version: 0.10.6
   - apiVersion: v2
     appVersion: 0.4.5
-    created: "2022-03-11T12:19:27.139077Z"
+    created: "2022-03-23T16:51:53.623238Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 0e05931586ea4d2c81b6e00849addb8430e2923f70b2aed08bfd5a733dcf09d0
     keywords:
@@ -23,7 +43,7 @@ entries:
     version: 0.10.5
   - apiVersion: v2
     appVersion: 0.4.4
-    created: "2022-03-11T12:19:27.138071Z"
+    created: "2022-03-23T16:51:53.622336Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 606a826ae48759b4bb305a3fd3200342aa5b1bd1ab1afac9315f4a25a6184758
     keywords:
@@ -43,7 +63,7 @@ entries:
     version: 0.10.4
   - apiVersion: v2
     appVersion: 0.4.3
-    created: "2022-03-11T12:19:27.136591Z"
+    created: "2022-03-23T16:51:53.621462Z"
     description: Helm chart deploys sops-secrets-operator
     digest: b329233d4fccf2d5377e1988b6e1858e1c69786e79fb56ce0b0cf65439f3228b
     keywords:
@@ -63,7 +83,7 @@ entries:
     version: 0.10.3
   - apiVersion: v2
     appVersion: 0.4.2
-    created: "2022-03-11T12:19:27.134996Z"
+    created: "2022-03-23T16:51:53.620604Z"
     description: Helm chart deploys sops-secrets-operator
     digest: d4ab3300dee58d2661db327cf205e821158cdae1bff032c3511d58f3ed97802b
     keywords:
@@ -83,7 +103,7 @@ entries:
     version: 0.10.2
   - apiVersion: v2
     appVersion: 0.4.1
-    created: "2022-03-11T12:19:27.133649Z"
+    created: "2022-03-23T16:51:53.619728Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 7f7da6232c02453208b19d737d6b0fad795c3a0c7962efba092367f9827190a1
     keywords:
@@ -103,7 +123,7 @@ entries:
     version: 0.10.1
   - apiVersion: v2
     appVersion: 0.4.0
-    created: "2022-03-11T12:19:27.131616Z"
+    created: "2022-03-23T16:51:53.618756Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 35f3813680049bb629ad53be826418e524ca84845f690d4957fd8ee3533a4b32
     keywords:
@@ -123,7 +143,7 @@ entries:
     version: 0.10.0
   - apiVersion: v2
     appVersion: 0.3.7
-    created: "2022-03-11T12:19:27.194436Z"
+    created: "2022-03-23T16:51:53.662Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 222eeff7f68ed50aa3ef0281b730d530b6bea56598fd3aa432c41e76ea42af20
     keywords:
@@ -143,7 +163,7 @@ entries:
     version: 0.9.7
   - apiVersion: v2
     appVersion: 0.3.6
-    created: "2022-03-11T12:19:27.19338Z"
+    created: "2022-03-23T16:51:53.661129Z"
     description: Helm chart deploys sops-secrets-operator
     digest: b4f8fe41e191f51833c4af0299fc6c2c554b04228ece8ce019015b4166d06468
     keywords:
@@ -163,7 +183,7 @@ entries:
     version: 0.9.6
   - apiVersion: v2
     appVersion: 0.3.5
-    created: "2022-03-11T12:19:27.192521Z"
+    created: "2022-03-23T16:51:53.660203Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 7ab3970270bb4fed2f7fc7c434ad5548f4af8d1e0aa29b8985e46bcdc805f4d2
     keywords:
@@ -183,7 +203,7 @@ entries:
     version: 0.9.5
   - apiVersion: v2
     appVersion: 0.3.4
-    created: "2022-03-11T12:19:27.191538Z"
+    created: "2022-03-23T16:51:53.659413Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 69bc585f2d67a7658f65c184f1522810d5d18f72ed52886fc8c211cc3bd79678
     keywords:
@@ -203,7 +223,7 @@ entries:
     version: 0.9.4
   - apiVersion: v2
     appVersion: 0.3.3
-    created: "2022-03-11T12:19:27.190438Z"
+    created: "2022-03-23T16:51:53.658623Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 4c45b12d750f8f846304c579c428c1e5b84a8fd45033cb84ce607f1437bdc71a
     keywords:
@@ -223,7 +243,7 @@ entries:
     version: 0.9.3
   - apiVersion: v2
     appVersion: 0.3.2
-    created: "2022-03-11T12:19:27.189112Z"
+    created: "2022-03-23T16:51:53.657797Z"
     description: Helm chart deploys sops-secrets-operator
     digest: dbec66ae148cd665612f9b69e0dd139264c47744c797cf504a26556c77ae2130
     keywords:
@@ -243,7 +263,7 @@ entries:
     version: 0.9.2
   - apiVersion: v2
     appVersion: 0.3.1
-    created: "2022-03-11T12:19:27.188161Z"
+    created: "2022-03-23T16:51:53.656936Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 6228534471c0bab5eca824d98963adce99d4754bf03f37130529ac52536c79ad
     keywords:
@@ -263,7 +283,7 @@ entries:
     version: 0.9.1
   - apiVersion: v2
     appVersion: 0.3.0
-    created: "2022-03-11T12:19:27.186826Z"
+    created: "2022-03-23T16:51:53.656106Z"
     description: Helm chart deploys sops-secrets-operator
     digest: b7f077f8acac1b6ec60d0c0eb6326ab33cf3e4b9fb1ee8d94b1fa21f96aa7383
     keywords:
@@ -283,7 +303,7 @@ entries:
     version: 0.9.0
   - apiVersion: v2
     appVersion: 0.2.2
-    created: "2022-03-11T12:19:27.185726Z"
+    created: "2022-03-23T16:51:53.655319Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 39d3d35a28a405e7baf82d507fa642966c2705ac3ca2f10077186a7fec5de1f6
     keywords:
@@ -303,7 +323,7 @@ entries:
     version: 0.8.4
   - apiVersion: v2
     appVersion: 0.2.1
-    created: "2022-03-11T12:19:27.184827Z"
+    created: "2022-03-23T16:51:53.653734Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 4a1a3299532a4ec61acb61db45d763385bc3c2bd50c9c1707e3ba258498b5ee5
     keywords:
@@ -323,7 +343,7 @@ entries:
     version: 0.8.3
   - apiVersion: v2
     appVersion: 0.2.1
-    created: "2022-03-11T12:19:27.183623Z"
+    created: "2022-03-23T16:51:53.652829Z"
     description: Helm chart deploys sops-secrets-operator
     digest: d328b4e165c3945430e196a853836dcee9982929fe24455021ddb885099d5334
     keywords:
@@ -343,7 +363,7 @@ entries:
     version: 0.8.2
   - apiVersion: v2
     appVersion: 0.2.0
-    created: "2022-03-11T12:19:27.182452Z"
+    created: "2022-03-23T16:51:53.652051Z"
     description: Helm chart deploys sops-secrets-operator
     digest: d0ac8b738d0f10d64b2fb78c4386efe91de39aa88a4b107fdf9d93a82d18573c
     keywords:
@@ -363,7 +383,7 @@ entries:
     version: 0.8.1
   - apiVersion: v2
     appVersion: 0.2.0
-    created: "2022-03-11T12:19:27.181193Z"
+    created: "2022-03-23T16:51:53.651282Z"
     description: Helm chart deploys sops-secrets-operator
     digest: 289d7c6c96f858fe15427b1858fbfcdec373fc345acf52e667df4ca5ee729c10
     keywords:
@@ -383,7 +403,7 @@ entries:
     version: 0.8.0
   - apiVersion: v2
     appVersion: 0.1.17
-    created: "2022-03-11T12:19:27.180069Z"
+    created: "2022-03-23T16:51:53.650466Z"
     description: sops secrets operator
     digest: 1c3c4bba7d66a7621beced04856d9904260558fe10369513743bc322d69482c1
     keywords:
@@ -403,7 +423,7 @@ entries:
     version: 0.7.6
   - apiVersion: v2
     appVersion: 0.1.16
-    created: "2022-03-11T12:19:27.17913Z"
+    created: "2022-03-23T16:51:53.649761Z"
     description: sops secrets operator
     digest: c526d5d4b9c7c2cce1d9da2c75b4e9be7a994f24dce159a659189414a8725eae
     keywords:
@@ -423,7 +443,7 @@ entries:
     version: 0.7.5
   - apiVersion: v2
     appVersion: 0.1.16
-    created: "2022-03-11T12:19:27.178136Z"
+    created: "2022-03-23T16:51:53.649053Z"
     description: sops secrets operator
     digest: 572c9015988b76869b58997e02a0c64152283e559721e4883d54f1258a57e8b7
     keywords:
@@ -443,7 +463,7 @@ entries:
     version: 0.7.4
   - apiVersion: v2
     appVersion: 0.1.15
-    created: "2022-03-11T12:19:27.17701Z"
+    created: "2022-03-23T16:51:53.648295Z"
     description: sops secrets operator
     digest: 84365f8e919ba9d3a00cfa50435cce6c63a8383357b2fde062b7aab8baeca6eb
     keywords:
@@ -463,7 +483,7 @@ entries:
     version: 0.7.3
   - apiVersion: v2
     appVersion: 0.1.14
-    created: "2022-03-11T12:19:27.175231Z"
+    created: "2022-03-23T16:51:53.647592Z"
     description: sops secrets operator
     digest: a1f2375080df20421701a33179b8e947ee682a70084d83d85da707889871ad64
     keywords:
@@ -483,7 +503,7 @@ entries:
     version: 0.7.2
   - apiVersion: v2
     appVersion: 0.1.13
-    created: "2022-03-11T12:19:27.174124Z"
+    created: "2022-03-23T16:51:53.646738Z"
     description: sops secrets operator
     digest: 2e81dc4e4d49d9cd802aff263f005e04fb57df07f33b3ce8643ab287dfd3a7fb
     keywords:
@@ -503,7 +523,7 @@ entries:
     version: 0.7.1
   - apiVersion: v2
     appVersion: 0.1.12
-    created: "2022-03-11T12:19:27.172899Z"
+    created: "2022-03-23T16:51:53.645944Z"
     description: sops secrets operator
     digest: 81f59ed60bfa8204ed285476f9ed96a45a6f4e7cc6940a5d246c9241573d93d5
     keywords:
@@ -523,7 +543,7 @@ entries:
     version: 0.7.0
   - apiVersion: v2
     appVersion: 0.1.12
-    created: "2022-03-11T12:19:27.17178Z"
+    created: "2022-03-23T16:51:53.644378Z"
     description: sops secrets operator
     digest: 91c3fbda73ba2d860bdaa21e37bf9afbc260ff767b377a144d0181d116a7ee34
     keywords:
@@ -543,7 +563,7 @@ entries:
     version: 0.6.8
   - apiVersion: v2
     appVersion: 0.1.12
-    created: "2022-03-11T12:19:27.17067Z"
+    created: "2022-03-23T16:51:53.643661Z"
     description: sops secrets operator
     digest: 89d9d41d70d4dafcfb957bd48776ad779d0cef7dbb1ab2daf0b745a53dd6e3c6
     maintainers:
@@ -558,7 +578,7 @@ entries:
     version: 0.6.7
   - apiVersion: v2
     appVersion: 0.1.11
-    created: "2022-03-11T12:19:27.169515Z"
+    created: "2022-03-23T16:51:53.642976Z"
     description: sops secrets operator
     digest: 7b0a65fd6fa9bafa3fd11bfef1a5f91f1e17d8cb8ad65b6377ffdc4d12495d01
     maintainers:
@@ -573,7 +593,7 @@ entries:
     version: 0.6.6
   - apiVersion: v2
     appVersion: 0.1.10
-    created: "2022-03-11T12:19:27.168074Z"
+    created: "2022-03-23T16:51:53.64228Z"
     description: sops secrets operator
     digest: fac31d6cc862cb7b9a81aee52ba1fc4183d70bdcb7424c3dbdd087fb53246b30
     maintainers:
@@ -588,7 +608,7 @@ entries:
     version: 0.6.5
   - apiVersion: v2
     appVersion: 0.1.9
-    created: "2022-03-11T12:19:27.166883Z"
+    created: "2022-03-23T16:51:53.641612Z"
     description: sops secrets operator
     digest: 01347c27e37dfff999ebcee12aae6d0aafa092d7c3b221d566cdf0abe71f4d5a
     maintainers:
@@ -603,7 +623,7 @@ entries:
     version: 0.6.4
   - apiVersion: v2
     appVersion: 0.1.8
-    created: "2022-03-11T12:19:27.165845Z"
+    created: "2022-03-23T16:51:53.640944Z"
     description: sops secrets operator
     digest: 6348b1b1b0e8d3df3926e437b2c0f4ad63268d26e2cb54cbecbb564102e6b19c
     maintainers:
@@ -618,7 +638,7 @@ entries:
     version: 0.6.3
   - apiVersion: v2
     appVersion: 0.1.7
-    created: "2022-03-11T12:19:27.164777Z"
+    created: "2022-03-23T16:51:53.640264Z"
     description: sops secrets operator
     digest: 710c1c9fa73a2ebf791fda4a608b5e29072d42c0b68c803c7bbeed54a582fd7f
     maintainers:
@@ -633,7 +653,7 @@ entries:
     version: 0.6.2
   - apiVersion: v2
     appVersion: 0.1.7
-    created: "2022-03-11T12:19:27.163733Z"
+    created: "2022-03-23T16:51:53.639554Z"
     description: sops secrets operator
     digest: f2a606c3837843241bb9d59adc02c38e1cca98753c602b9f758cc61d735ca7cd
     maintainers:
@@ -648,7 +668,7 @@ entries:
     version: 0.6.1
   - apiVersion: v2
     appVersion: 0.1.6
-    created: "2022-03-11T12:19:27.162126Z"
+    created: "2022-03-23T16:51:53.638844Z"
     description: sops secrets operator
     digest: a2bbf9b39ec5f5b82965037f8f245fb3122adbe31b1c7d336fa1f4cddb228b88
     maintainers:
@@ -663,7 +683,7 @@ entries:
     version: 0.6.0
   - apiVersion: v1
     appVersion: 0.1.8
-    created: "2022-03-11T12:19:27.16105Z"
+    created: "2022-03-23T16:51:53.638179Z"
     description: sops secrets operator
     digest: b89986787f33bb6ed9fb0c658431be8646302e9c1a24537c26269c62249fa071
     maintainers:
@@ -677,7 +697,7 @@ entries:
     version: 0.5.3
   - apiVersion: v1
     appVersion: 0.1.7
-    created: "2022-03-11T12:19:27.16004Z"
+    created: "2022-03-23T16:51:53.637583Z"
     description: sops secrets operator
     digest: 9467709cf6fbe8d9d779cedf15fe388af172b609f3ca452ef3d8894f39d999df
     maintainers:
@@ -691,7 +711,7 @@ entries:
     version: 0.5.2
   - apiVersion: v1
     appVersion: 0.1.7
-    created: "2022-03-11T12:19:27.158974Z"
+    created: "2022-03-23T16:51:53.636885Z"
     description: sops secrets operator
     digest: b54b5d8497564ddc04bd6d8b105eb0a3559e82ae1f6aab2f59ed3e426f119287
     maintainers:
@@ -705,7 +725,7 @@ entries:
     version: 0.5.1
   - apiVersion: v1
     appVersion: 0.1.6
-    created: "2022-03-11T12:19:27.157976Z"
+    created: "2022-03-23T16:51:53.635373Z"
     description: sops secrets operator
     digest: 177f1ed214d6e72eda589a6ab155a417c1a4229bfda11e87f24af125a3542ad1
     maintainers:
@@ -719,7 +739,7 @@ entries:
     version: 0.5.0
   - apiVersion: v2
     appVersion: 0.1.5
-    created: "2022-03-11T12:19:27.156995Z"
+    created: "2022-03-23T16:51:53.634802Z"
     description: sops secrets operator
     digest: 1535e130357afa883db0b3d30735c817d3b7d412fe5bdfd71534d0c08defa7d1
     maintainers:
@@ -734,7 +754,7 @@ entries:
     version: 0.4.8
   - apiVersion: v2
     appVersion: 0.1.5
-    created: "2022-03-11T12:19:27.155915Z"
+    created: "2022-03-23T16:51:53.63414Z"
     description: sops secrets operator
     digest: 19b11dc2d1945f3c436a7d03763b4391d4a382fc13ea515d25422827d859d6d0
     maintainers:
@@ -749,7 +769,7 @@ entries:
     version: 0.4.7
   - apiVersion: v2
     appVersion: 0.1.5
-    created: "2022-03-11T12:19:27.154967Z"
+    created: "2022-03-23T16:51:53.633614Z"
     description: sops secrets operator
     digest: c839e5d3374b948d27ad49643411f4891fdec44d179dea06423bb0d6e29d5e32
     maintainers:
@@ -764,7 +784,7 @@ entries:
     version: 0.4.6
   - apiVersion: v2
     appVersion: 0.1.4
-    created: "2022-03-11T12:19:27.153835Z"
+    created: "2022-03-23T16:51:53.633071Z"
     description: sops secrets operator
     digest: c71f9f66be32f8b9d3c8d780b09b2455a40fd9755314004efd2bb8d379dafe3c
     maintainers:
@@ -779,7 +799,7 @@ entries:
     version: 0.4.5
   - apiVersion: v2
     appVersion: 0.1.3
-    created: "2022-03-11T12:19:27.152917Z"
+    created: "2022-03-23T16:51:53.632537Z"
     description: sops secrets operator
     digest: f3f2f89d4ef6018776df0a12a63dd2f9c9519b9d1ac03a9a405e31d0fd902ba0
     maintainers:
@@ -794,7 +814,7 @@ entries:
     version: 0.4.4
   - apiVersion: v2
     appVersion: 0.1.2
-    created: "2022-03-11T12:19:27.151999Z"
+    created: "2022-03-23T16:51:53.632046Z"
     description: sops secrets operator
     digest: 1fd5eed318627f5ed0656f4e8ce4a25729568a1626ae313bcbe21050f5f26240
     maintainers:
@@ -809,7 +829,7 @@ entries:
     version: 0.4.3
   - apiVersion: v2
     appVersion: 0.1.2
-    created: "2022-03-11T12:19:27.15096Z"
+    created: "2022-03-23T16:51:53.631528Z"
     description: sops secrets operator
     digest: 1f4f9869c75f0922e83ba5d530e101bd4252d5c1c31365800cc9d1425680cf18
     maintainers:
@@ -824,7 +844,7 @@ entries:
     version: 0.4.2
   - apiVersion: v2
     appVersion: 0.1.1
-    created: "2022-03-11T12:19:27.149906Z"
+    created: "2022-03-23T16:51:53.631014Z"
     description: sops secrets operator
     digest: 6b054a4e9f261eea3cb84ee2e70b87b24780f1703e2c218ea5f69b7f82d1876f
     maintainers:
@@ -839,7 +859,7 @@ entries:
     version: 0.4.1
   - apiVersion: v2
     appVersion: 0.1.0
-    created: "2022-03-11T12:19:27.148917Z"
+    created: "2022-03-23T16:51:53.630513Z"
     description: sops secrets operator
     digest: 78b62ab37eac1b45f0a68a9752a3615c5d3f1c960bb4057e665923ce104931cf
     maintainers:
@@ -854,7 +874,7 @@ entries:
     version: 0.4.0
   - apiVersion: v1
     appVersion: 0.1.5
-    created: "2022-03-11T12:19:27.147976Z"
+    created: "2022-03-23T16:51:53.630011Z"
     description: sops secrets operator
     digest: 41baa3c580cb9d8951c18513a4f04c4dbbfad99de9c62f53de2450c0c7b76725
     maintainers:
@@ -868,7 +888,7 @@ entries:
     version: 0.3.7
   - apiVersion: v1
     appVersion: 0.1.5
-    created: "2022-03-11T12:19:27.146066Z"
+    created: "2022-03-23T16:51:53.629401Z"
     description: sops secrets operator
     digest: 1103b1f7bf7af3f400c172227cd5a3659f3a03e5e8158b19ba0b25f7ed45208b
     maintainers:
@@ -882,7 +902,7 @@ entries:
     version: 0.3.6
   - apiVersion: v1
     appVersion: 0.1.5
-    created: "2022-03-11T12:19:27.14518Z"
+    created: "2022-03-23T16:51:53.628884Z"
     description: sops secrets operator
     digest: 15c72ba7fb09d0e980ec32fd94f56893c439c05c435281a9ab9c8bc94bd20063
     maintainers:
@@ -896,7 +916,7 @@ entries:
     version: 0.3.5
   - apiVersion: v1
     appVersion: 0.1.4
-    created: "2022-03-11T12:19:27.144285Z"
+    created: "2022-03-23T16:51:53.628362Z"
     description: sops secrets operator
     digest: 025a6a6381b75286756ef55105ace6e911e5a5818b495ede6356cc8ec572aeac
     maintainers:
@@ -910,7 +930,7 @@ entries:
     version: 0.3.4
   - apiVersion: v1
     appVersion: 0.1.3
-    created: "2022-03-11T12:19:27.143338Z"
+    created: "2022-03-23T16:51:53.627816Z"
     description: sops secrets operator
     digest: f61b070b640169439cf4ab500047c1e356748a85871f7aeefde46d63d87d453a
     maintainers:
@@ -924,7 +944,7 @@ entries:
     version: 0.3.3
   - apiVersion: v1
     appVersion: 0.1.2
-    created: "2022-03-11T12:19:27.142501Z"
+    created: "2022-03-23T16:51:53.626404Z"
     description: sops secrets operator
     digest: 2b37dc4e545e8a9540f6b7693079b98bf161ec5a68899defcfc9420bdcbb33e3
     maintainers:
@@ -938,7 +958,7 @@ entries:
     version: 0.3.2
   - apiVersion: v1
     appVersion: 0.1.1
-    created: "2022-03-11T12:19:27.141657Z"
+    created: "2022-03-23T16:51:53.625841Z"
     description: sops secrets operator
     digest: 2e2762b8f9d66aab0caacde225955fec8bfd5a4cc10dc6943a1de3809dda4091
     maintainers:
@@ -952,7 +972,7 @@ entries:
     version: 0.3.1
   - apiVersion: v1
     appVersion: 0.1.0
-    created: "2022-03-11T12:19:27.140852Z"
+    created: "2022-03-23T16:51:53.625285Z"
     description: sops secrets operator
     digest: ce84f5b64402a582c7689cb842ba03fb10f968c38b57dc9e05f588493128019a
     maintainers:
@@ -966,7 +986,7 @@ entries:
     version: 0.3.0
   - apiVersion: v2
     appVersion: 0.0.10
-    created: "2022-03-11T12:19:27.139969Z"
+    created: "2022-03-23T16:51:53.624739Z"
     description: sops secrets operator
     digest: 5e4c8bc37ea2c819c55b288c0a5e76ff8c9c02be591bd53776606666af45581c
     maintainers:
@@ -981,7 +1001,7 @@ entries:
     version: 0.2.1
   - apiVersion: v1
     appVersion: 0.0.10
-    created: "2022-03-11T12:19:27.129968Z"
+    created: "2022-03-23T16:51:53.617032Z"
     description: sops secrets operator
     digest: 50b8ebab19008dfc43de1eaee8b0f6287f7a55134585dc6ae88df2520d779f8f
     maintainers:
@@ -993,4 +1013,4 @@ entries:
     urls:
     - https://isindir.github.io/sops-secrets-operator/sops-secrets-operator-0.1.10.tgz
     version: 0.1.10
-generated: "2022-03-11T12:19:27.128593Z"
+generated: "2022-03-23T16:51:53.616298Z"
diff --git a/docs/sops-secrets-operator-0.10.6.tgz b/docs/sops-secrets-operator-0.10.6.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..e158c62f51778db1df7edbe38d4e3a366117506e
GIT binary patch
literal 11265
zcmV+cEdJ9UiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PKDHTim#^;Q85qg|<2O5?JhhBqXzacg`*sdKfkY_<))D&dtu(
zsNHI}2HSEZxk+c3{oD7`%a&jL00NUa?H>}_ma0mns!~ZRl^98w%aBhIXD&$)g`Cj#
z;S^Ht&0!S&?FpVvr_*`+=8gQn)9IA|@4R`p|F`a&Uia<W{Z41U`?pSa|IORp-$3Un
zkS}{u#v%P%=h3*zjr&F(nBbogWthZ$FzY!mNwS|E?~V7?86)OXoN)Q-M-)cD7s3I?
zC<)1&fm#7_ZqfXX&@t;fE(kCu33FUo)N#RWB>qLQPv;V>6G0qvh+{-$c@#k$_5o%%
z9%K5yQ-&z>*u;wwcL0cCgtCv0`c+Q@BPsQf1UcnAVf}VHz<ipHJfB2u4WV6I*9$Or
z_&h;<0FxxdK9q#ca@KS^-dpFTJMRgedi|flFh%UC48UUj@AkUAcV+#5*WKUf|8qQB
z;0R4%8giie983tU*C)@}0@qW_0A>J!e;#}|bti;IkaIK!6C5H@;0XC4qzKF)#c&iN
z1~>sD1QN&?8Uq}20_G&8fTJi0AxF$}oUJ<jj0wFXWc*uuio(bp6Q2PXkF$~qMXpbx
z2y<E5*#ZJ>Dv)pj0u&3P5f~FcjZn;`{sNeC5<!lA7|sP+*9Aw?jEN$EBB|-XCuz)q
z3)qyT;TXh(ixxy=j3*e49bN2Dl<I@7fb-ME(ZTg#_~YPm;NS=bsP6zE!Jlj90r^@Q
zF9!%rgketTJhNo=cBlaihk*mczs5+{7faGG1PKYTKX-uqbs>NB!9jQj=d40{jQL4{
z{F4}S;1g|~n;Vgi(wL_UYgsf;hz~=z*Xi{-ue)y-)>_^K)s0t*aiZ^K6;*peNdyv#
zXId0)5w*xxU3HO$p|0HrAAeQg&S!{HJVs24jBCVcEM$TTNl{~qVukp}ROo|NYYB*u
z#6bzdBn`s~6b0rWj){_9qe^f*Rzhxs1SDh(UimN<U!?}zVLk=77)F3laGQ=$55s83
zNyyj&*9X7<;W!M@8TQeEFQq=~_yuVB6aifeKvm5F0G0tuFqi04ic$n75Qk_CDDp|{
z;}9!##4(6)oN~m#s|d%SyW@dZV{MN1cO0r}A51u+eXy@#UO+yTL_yg!pTrX!c;Gw^
z=RnlJR2Z5GASrjr#P!3JaYQ{QFDzP#Vqu=feK3I`6XKjeKJ9B1rz8k)8~{~3rHWjJ
zeD!}C1c-^QR3=lJy%`EgBF)GLGDhGPihVLh^n0JgjD%>Qe(r@NI2C2TKSHB4*kc^}
zx7QT<NWJ|9(s)PM(F;n(sX|wT_ZuT|1=vYEAr)8yN(tS`7`o$xs#RGZ{})U^NCF^1
zi{`!}F#==)wgr-HAv@ce{OujdGKsbi#Ah3b#3y>h@C!*HnISq7sx}ueHF6IeDmgW%
z#)1#qdte*K6C(acg6!=*fgQ$kF=C(qQN?QT56}U3Q|wQHPbft!A@Nwsf}b)@A|RoG
zP|(8!cpUo_K_(iPQR4trpbrGfYC9m80}ULJ8PdokYq?-8lf#S;6P^k&%Q#k~e#diw
zRq0frliwU?ieSj67nF>IZ>rH>Po;)Y#F*q=B0d8Yj}wAp4n|nD)6$Pt|GUn2-InN>
zgiziG;->+3if1SmuoRqv9E<kr&jLLF!t7%h9-$D<uY`(>Ss!%w<+lV;Ovc&UUdLd#
zL~x83prGda0vxp{x*e^A#}~)-3g`q$F2pAjaKmYeZou*31yJKBxWi#6giLh4^iI?`
zKxTMsv{v?UB#ajt1IPf1XPA;$YOrx$>db^hdIlre?aCBNltKn2HsC7sMB8#;I!qT7
zc3zk#mLOj_6hMFK_Cb&Y-LH$JCz13Fj}I@v`wv%5eD;%!&u794g>WPkOSp)I!3Q#i
z1IfGRW7*6<@O?FKA4=svlT*R%ZCf$|Kk+m@H^OgKqOu3L@MD!6L@AU0T?Sl8gOa7f
z7-xtP#t$TL9uiol!^Upf3xV)d(PzxKutFM$c5}p=)lnHB3R%`%<0yO)cK1D+|14Qo
z-=k0zQhj<Q+dCIsFh;RZP6nokB4Kz_hH9{Z5emtj=r-|PHB6xqrclxBnD*ld5WFsv
zWi(T`DUGsnjba${lOw@DRsTveD4{s^aRNh4h43g<;jzv9!w@40;MGAsdj}^+J5`7m
zRfxW-T?0|OnG2v~)k_j_Q6mIW^0XvKy|_hlmbGUuqeGf18>;f}L=BiElq3`jCDP8w
zy7Je=jzdc>UKxh&X+|hI_OhPZSs<QDIzfn;WE>oivFHvM*4kX=pwFDbK|E95xT_a@
z4t}{BULCz3o}M2Z4G+)HemFUHwt#AMAGEs0U(Q_+?GmtjW?<ao26NBE&`;Bt;|T2m
zh73#PGKiz$9I!z=`x#PJB=2f)csaNp9$yXy*C%I^G-mN3n(L{Z8&HG<m+}(t(Yz0`
z*DJLm8@E=W_XivzGqpJgLpfDvQiO0^9xx4H9D`OHalbtwq$Q@pLYg20UB&_W45K7O
zqRj1gtT@9K)9^6Ns4atqO!@^R4(B=RCWHuP$TGsW?^~#=d^BdJIN!~ujb>uSoa`?-
z9}#Nti|GFphH|3dlPE&5n%;Aw&Hp?bda~M5`#1q1f-|HB4#)r$D4CB*sx;1@5}`g~
zWE6UtGDJPKS^`5xj30^^@TV~L)&G<;(S3l#wm7P;0U_o*R2DHKWe>2_p9=IJaE!%#
z#uKC5oTOk(z#WVWEwQSlv1%=s#7#&Tk~<-60(vOCv^@aFzX@~1rzjE#V&o&nAf4~Y
z_EQv*neyuWl!kLK($27$nt|<{)!Uv18ey)zTLAnd?SuVJC(^$o6v<VCZtuGfSU2%g
zidd;ew^HHln-5rbz4S*I3Xw1RUyn%>?T-|l(U^?Ul`d%}y?#nDpC6K#qtE%QcOZu&
zQ2N|BPW^OpBruCUghC8x8XvHqn3y7UUw1m0CwE*|?wFD^DHWVB5Qx_f0Fz<?)#z&y
zB3hi4i}9_x9N_T0q*Q&2X>c+T-uOJ@mgT*fZ;DNH1pSORhssqG(jZuU`JV@ema<ta
z62tyqVP*VZ<EdZ&&sJyKXXn?0E02HXkHE2P|4;l~T>pR9ee-6s{{I}$vi=`VQJ5gg
zJf1vwD`-jo_ujpJUF`o}r?bE5|7UrA|Gm8nW;p5thPd<%`8+}2i@6E(r>GBh+kgDw
zh*Hkrb0U4Asamx*vw7*sc#baT3J(g$2(;=qkwncFaPzX#+wxSvft<8>KPxZRUJwWO
zVpxfN@b<O*6GvC+WP(3~mYV|;-kkVbQESGl496rDj^C#ghI*QxB(fcz^9xeYWqB@e
zh&C}WLOv8@9U~C}@6!>YG2)1+)=w}B$7(rHdOK!u95e80G?$z?I=d2O<-99F{*LFI
zOaMip@B|eQ?YC-oP%m^8XUWRj6vS(4S7fx=Q^@&)CmC<c8xC2S#sVvKK*(}Pf0vEv
zf4_PkTXbf8QBb@~#WYnpqqXpMZ2}XDV?F_`e`D^yu~rG1!n=;tHT_+XMys2JD(QFv
z(Z#Z>wcMyua<OgY?v{00jg7N;um09y9^hW?dqN+9)_-q-*0A*uT_aIMV!b@LD#fa_
z0tu7EyUi5L!=$a|hQI$VrcPlxUSdx?@W&s{6orw;rftcJRqAS<$;wp<aLl-vt4T;j
z>97<^G4mh`o2iGD1&#<%l`8k(Q%ZOSR`9kKN(5sVps_oe7ilt!H>JK=$^I`J|K*C|
zP!)J+JjjyqzuT#d|J`n<yBYtV<I!>~tdTLwvdhh~Id~NlUj9^B>Dv*qcZ=h3UoVk5
zg}Ab=6Cn=Aki&i!!L^QRyArQ1;Q(!D`p$9~#>jZ!9^iP4Vh-L2S^)syNsLZCpvAUB
z1(uyB@KcH$#wm`2Bh8z9HCt3HaNT@TSo1~dO2KU1*eYn2qZ<nAb>*S~dTG(zJkRhf
zv;R7LVn|7dzLx!e_pV#9|Gka<f0m~-F`y&pXQp2|A-Nfs-(bq8gyJu9ZPB~^PPsQ-
zZTt_Fv|N%9J;>zelNN1UA8+Yt8mbszm|(f2Di@hu;1fc}IJVm%!xplrVNpohZRP+O
zJ)+-j?`~J2wOZB6Y85(y36noH#Sa9gYquGPJS_nU<e=z+1af~W|4NfF<fsZ6%}~r)
z-rRazs?-XEMkL0Zi1Eww2}Oi?K8fmRm;R|P-9Wqw1*qcC@sVC08d`&ZB&?Rb8mRbl
zj6$UUG$=#N8W<=3ypt~<OHX@(V;JHusNC+RE?O7<S^`lW-Pf`I!;v5@4%Qt9maYH3
z+b_j`_j+%;Z#VY;Ii4l<zhc(^Q;ERp1H+$W7+~q>H{^3U5}1jK9r^kg>ckJ0z&dwd
zzLvuf3DG5*2rg8I%17Wf)?-00EcEG@>3`rSkDUE4_y4+`x8?Q!{odyM$Fn>&^M5O7
zt~mRbA09XNFPR$wu|AS7*Q~;%by<aMmA6=Z^_7OePx5sJOL6|niw?JF?)}C@Z{54j
z0%n(*vso(m3p~s0e<ps9I19Mg{&(NL-mmQc_BQ*!&-2)}8YT(L=koc<xIc{#mmnFB
zq)*_n!pLAB%TowVbeKAU5Q(|asipydC$+`vTVs$NfYj7k9G38`<5c<;P{*BkSVE-t
zSKTZI(%xmt@u{aY{uWP!6$=7R{t2V7sq8(7b>DnfMvx7e;t2~Z2XbqdlF&^;7^A-V
z86xU7Q~iV;^^mRtz(}5IpA676Y$+ci%u!X27Z#XgxLe1_3KNT`^v)itf;AElB!NBO
z)0D@UACmk`zM<QM?27MhG}lyRp8?2E@=nu{r%qhT^SQ&eIwJbNI2?V?VZi=9fdTry
z`|pH~k?=*n4<X}2wM;R#AgbfEpk--#c1+dF&vJr4{^-{h;V=My{Lv~yys%D^*4E39
zn%c4>#5andFpnR%+anye*>rmkY`ebr*H3_ZN<n)DY1=H%1W8~zroCJF)ZYHpf;}T)
z8lexOi!G+Bg|;j>x(vc9XN<FyhT^A%Al!WItQM3JC;`*GMRV3&7jj!4!j-k%S=Sq{
zjH_qKZ9yme1p?Y^O6nzQi8MV#k`_vlRzgB+CtY>AY2FpX`ioGT<fp<qP-6!y{DpE0
z`j?O(M9Vw!7P)NZyZKq+wdks|PfO+QUqvYva*@I~Kr0E3tu}E*VG3t6M3L-gxg14s
zd>)5$9R$9FMq^3~gtSve+ad8`D9x)1d7)MjNP~iKZ&l9DMu=1FFF!onk%wn9I4)?p
zuByviQODIlzwh?mc^$9gbyckby)D;O2YOw34z^g)HX`=1UoRn)myF4lIeic!I7Spm
z=M|G!hUw>C63`s+RB;>!D&|mz45FCn!`Bo6%m9hQxjbnNeU4|S4otZ*3cD+@S6ZqM
z<hx@ebN9IN_{aAJCp<r~UuvHO@C7EWImvESGl#?Vr>2@A30!$}yRNSM&{Q)&i`@*M
zbY8mzs$`a|%mWS9spYzPAse4nH4!?LM}L*^RW!z&+m=$)FQ}gIyN(erzSLO_KwAml
zm-0tKiy<L(GFqrpdyKmYfT7l_sZ|DCIt0EHWTAW!Sa$M!Z7zwL^JivKM(q=FDTld$
zO(>of*<c2Ni}R!5*};cFi4XE@;SZEVW#$1D3avLcYQL$W!_09#oj@jkR`o@4B9G6{
zk531~gNuvPlf#4Slk>CT;pO0HaCUuiaC%iodad))HcOusaw@vFx@TfhdG^!A@sH>A
zyj<e7tVTpJR<EY)-xYiljBUjQ+c9-5@M^V*^p1=yT~1K-@c0tizF!WZ4s#8MvJ=Dq
z_0#2Gcs)2fIJ+L69IY<S*|FRPk<NT2oBk3J>bXV271D8g3y3^CJsG?#ktSwvIg#q5
z^9vJtWp-%tXMw&nIKuiMca!`yIm1uWT8}lVhSl1<;CnQ$YuZXJHYe&I*iuzMWy`Qa
z)t8b|2wEwYEiEnPhpqF)ux_uiX7z;AWi?gKD67!F%82ByHQiN|l&9ro982t`eHOm7
zQMasWwlliM_Uj60SE*jylx+a|z%ANF30&Hxb;EZ<msV!@)y`~UQ4(kw?5>KX_ZTd_
z1}wIBfue-Zk1*AF5gM7b+WNsFBeJ{!byl#Jn8KR7eWE`vRygPH*n+WWt$n$ql+poI
zrKTpGfO@Qi09J36;bo<4*4a4%merNT?8=iBYEH`4ma{#}9FT8&nS23{Wp@FOmAoJ?
zWoI;a7`B(*YW-6_%l7~E9?wt@XAcSkSQh{J=3S>8|G)os6aV=v&l>UnS!6&dax&k$
zu4r;`-_nESz2?F;x3%Tm9BK5T0SJFVV^XjG-V}uq4q`&l6W~~;|8L9jpF;g#Z}k5;
zo-J?zIY(4w6jEId?xrXPqZEfSEo=h)TNoggB>-n>k`T%nU{e%^APC7wh1cLX*aH-W
zQ0_L!)$RN}jK|Ivh*6-j@x4kYn&8hSTk(I}(J6dMENcpqK!T{uPvtq@(be#Z6N;QI
zpii6se0T-Mm@>x;FmKC$75R=g`a;|CU-M!bw8cN>C!59X9MA~*w`rpCqB*-ByGxv1
zZv=0hU5`hJv-|&?E$}m>n4}Dx91WP`C6xSzeC~L7j9^=pqvSWon=zk^k%TShLe8g8
zpS)cMj(l&|+4Vks`sD0-aO69?-V8_12Y8DF+84AY_4<D~I5_$+@S^dP;8?8xz3%>-
zURnP;-Oc?U&+=?FT%O^qeAS1uwFRzJGV?<+Mvk)!{^vvP+xUlsbbb0CN0<NMI5#&p
zI`_2mcN6$#(#2-yE!2%7RsonK;T*UVO>*0(V`eZ9XI&U3Q`jBm$ESuq9jkPS&fkF;
z^FW#e6pj&aT^SV?h7yNjL_O_o@P8cuT(?M-AVTGC^z5vRH#awq^ABNQDFQdu0yjD<
zsQiE#(hZTh`(zr>EHNbXeYxRHz+p(zF?j#sO0fRmmn)E)Xfy^h48hGUhS811Hvvkf
zezP1hLS@;HCkGz@C84<rqL`YN{rbxE?U?w?gLlk>5&S}8*~#dZwdK5lw^N2_km50F
z>x6`^24z;pTzRB;%A;_{*_CN<D|9#H#Z^hUVHlD-2J~LE7*bMZ66y+O?8*$%H84$X
zN<OXTm=+wA2~jKcU`-O*Bup7FAe~*Ha@<y`&g5$th)%@uZ)#tk2~<H1A{kv_<!Tju
zB{QjrceQD%h2EURJWCnxIC7X)$~z*2GfrV5DE(L~!Fivqqpv%*Y?4?&&vPUxko|VM
z5NWvs^l?JnReXxTM`37k3Um^e9piQ6feNaXQYTGa8R8{AYzes+;;(|1!ABwRwarS|
z9p?VDEeh;tGGuARuG%_+CY4o&wK+wo9YN8EHsgZ*3X}uDE;tB<+akT6P!OSSUZ@57
z8y|%@Zs)f%2mt5Qq$w}tW#&Y<LK8wGso(EET<L6&T8?yfA)&dDu{1(bfs1;gQ)G&|
zw@4*_%vC3cQA%^A%tayLci!uJ)<qM!B@uEh&G1dF=-hzA%cH!frr9u~`tkVi!pW%-
zx@^==Pa+#z#ffQ<vkL~8PZ0%4s#2cT!TCQ|=V#LC12|T9(&${fmN{162{j`RwE0s`
z#w?TM;#ggZBhxwwE2}BUGp51Jjv2fbLeE42NqeZ$Ld%i(P$}~qFvO*GuydQMc&i&x
z!G>iqve2}w)iBQm3l!OXIr7S(N@ssB=JhNmJimA4I@|AhwXMbH32OC0tF&y?+S3I*
zPemO4p+-XCJ}kjkmsVQt0KhD(waKk4;|e6)2Z{4T1=nQUmG=2Fr_g4zwoYP9vB-jX
zMs#cv_{Q5DOyNvjjR8X$j8dwhBm(lRcK*FOI7zuo5REWnCS$D76`g5Za$%5N!qz^@
zje)R4N-&g#zB<3SD&~2vwP+Ffg2NEX5o60-?-mEHG_pF};1<o@nYxaoprk61ILI@M
zgOekvKgGoBCcknuUHP9;hqWiMP>Txz9F2M`Whf{}P=LVAEt)frf95wz)as;Olc@%}
zyn?d}ei4&=CH>-?CC@@iZp^0fjlL&AWtPS=wRD{q0&awu3=fV6!^^?p$;HXw?E30P
z^6#d&cVt17zK%_n^8=xPq6wlX7M?UhebMNT!c)p`3<R8zuvP|tz#+LJoZ}F+VSt2`
zNuMXXyobbKsxC3m;FgPWuU8dj1^OUlMA8U8o)RC1KzP1_nTp*oK)=2cZn7XHpHuHh
zSLUY}*E%!T1f=FuTP3ZKpKqeMt8+)*SVpT~nkuPDOl(hHlu5jvA`@||(|I$Qt6jjh
z<i#gZLSmVR95P0HEH6;W^g{`Va!Es3LA=#;DIe{y;7?1u`6$Cxh%07X)y$l4@j8JN
zMu;QIOm5MuIzwy`!KVn*EW@PM8A*j&fOedFX*ch|^*lk~KD+Er{FU8n3GSVHS3K%p
z^IzdF`OCS_vuED}A~OnrdvNpnA2;BBX?ATO>r0zZsN6EaH?4lFwb!yET+|zF9a?>v
zeSEJ~9THVJ6KN!VNs3mv6C|f9PaJj+)B#~ZUaKV_J>o`<3WDq~aXpgdmuy%N%~r*|
znCFB7l;n|sw!#f0HlS+wM3um2zEr~^FH8PbC2IBCQY5@A80cPI$#D;EKK?3&W#ub6
zB%GQIv1Q8ExB^dt4E&^|8LLXZ?UYvE<Z&sPW-Pq;$Plwgx>mdoDF^kW^0nfnK^gYa
zDgH9vXSgb<mJ};ssF@j0a$}T2p9D+fONZ*T`mG=dx-Ijfr(X25>@;0WW{@nBo3D9a
zS%%+492J-<TlCc!o5dfMarV9v&f0SUrS7c>sc-eW`+KcITzsqF>&T8>bZcG}rwskS
z2RN3<zUzF~mDc#d7x`5&WO4kfG^^UGu4>i7oBAZu%2~xiAF7L1l|gU3U)F+S9iuG3
zS-7BB2R<7Y^7EGkfF19Rw_jILmNfP3quJ#l?;*FwD#&%`gqygw>|)yz#3uf!1JunB
zb9NODKNnzFH}7`4ubW{R4(4Z-mKe?i@@cCdr(q~%?tyo-N}T#URt2Fv8rJH!#HiBR
zYsqt5t$s^P)`g)ip5AKpTk^V1WwF=0&-ICKbNw23x!R1%PR$j1T5?IWeXUzw3vktm
zx}pvXW*eyA*0ryNrj^h76&k4or`XCTxfE8C@KB$*=H_Vy&yIy{n3S$`PnLvMN%B#K
z_k{ORON51hv)o@&F4FztTc;ENJMT+29LuqI?YrGIK<f-^25?^urH{DIS_98dI+R(v
z=r%i9xpH!)Jf3~6%MXj#RRH*!xL3Hc&|s+zwytrd>u+nTg<^u8bNP7P=|~wdSFY7o
zv!bi3H4C@8HCLB`-PPJZ)zof`m0U{=Ywl;4@a?GTa_6mlu^hN}9CLFlg8npLv$M8z
zZ(Nrl4sOx>d)d7o_p(2Ky#bI0sk)1hfE&47sTV76Jn#dd=6=aN$0=;5?g0q?dGO&>
zE$6Excs(Idp0?R^(OU${R9j1m+8|}qs=KM$1uHDVs>_T@bo>MC?q1_$cefAzNm2>O
zY@`_V{%FbZudl2hJAd*>(fW`UJ8s6xL~KRQur(sV7sr3?zkU6>od5Ine)rub{_8m&
z*L9s@4mgZHa}>)h!)ktaY1%LKsB|QwQsgqfoxiM-yUfb*6`)uqK#;+uh!*a~nRUGH
zyp99ZvH&LWHI5MDFiQGB%q$!`CyJ56nsnJFSy!OWz|<zxmYczfIvvwa5@ww$73T4M
z>BFf?7Y;xYrWA(#QrdB#T(q+svP#sgKH)e>LrCpP4gkz23F?C^Q}9^j@n(j1E*PVP
zB42obR#Fwk1{2Sw5cpFRW$EKcg5raVlb>H-6<z}{&UZcRrU9&Ms4AY>P^*F9;Nm2M
zl2BnOI4&OTw8W@z;In{pTacyiJyQ2WF*9or?}VePXpoCVm<i8~B9>h+3<?jK02u4R
z(Ua@m!qRK!&L{B<NuSv#L5#m-u$dVqRj67CrkHxr7=~&<QTN|QP|RE95S+#qJZ<Q~
z2SU}haUWQ_iAH^V5=Ci@`MfPP0gqBnC~J?!%%aV3;6mz8F-N|bKeS<jT}gT@Rmh9R
zTbUcUU7%H^bX7A5>w^^N1wA0-T68!xlMgk?${20N!pp(cbw1$`ol)k#a!Rs_Ebjur
zFdR=1Rh=l8R0PayAxsXoa@(T>l%=BxbCz8REEmfTrA?7OtjZAQfs+^<!U%<jkfE>M
z0fN)a6^vc23(Dyn?ZS#{_L)eMum$~PX{iBQObSw~jN(yuciqma2hj@%^afdZH>6St
za}-r@)I)n8u@jD>OvAH1I28){9?gyO=3CqPHJ}A>4slo(y~Pbzk6uk5!b-lETEfqj
zG@HQ(=!+ogo`zn}9~ApdIG5Iy#{Hp{C4Yx04OeP%-t($oe!4t;FycDPzjFNs&9Fa0
zO5wcpO^Xg151G88aEYMndkp0?I1d1^70g(>1{!MV5By|!Tc;QW+{b?MWGZ&-C+{P6
z1UW1ync36aXxD<eriX`k{JgTdTtp7;*prD!oqU+k;TqX^gd9NHsPx6w(HOW{`0>Hz
znO=;1Xh*_3HcTj);PBzr@|%?52g+Xv88_>kO9b&0GXB9ViHb(51A&&Eyn{>v%vMg<
zF_;moX?lTx575_>Cle^S4*VoYmcYL_zIYNXy9knsmI>HTt6|@ylmalR>4h3{1;2j4
zae(Lr6%zv;Bp{50-tw_F5+;N;zy$Vbh6hpnK)q^od<v~JQ(hASAw-)K5-xB?Ru}oE
zc}14Ayp|+Oov#w)>oZ0b{xwUdK0=q}idg1-nf(A=UQIzw%vp||S&<=mU}{Z=UDYJ$
z1uN@r-u!Drki8xe!9<W{ZDM41$(5g_BV=7J|5A}G;_hMzFtCd1m51KqW`Q~+$w@U#
ze4*krXokdAnd&}Q)3$~Em7S%xHgQ}N{r(DlO7RSa)zt<IGpRWjpjSBZ>vHx$qOR{}
zNNuA=gf>}MU>_vN*Ck4~HxQq-eG>a9;qs4sP|~R(+goIY=nSJfmrTr3{m%A7`>K2&
zL-F~#y``?-_&PGUXxdyL!VX2NipnBIU#ZEmz)GT9gM6MK&%~(9%bL<p$O9LIF+2*J
z<xDL@nhJZMC}QPvx18LfxLioZIr)=duMtaa1u3w<F;W3If(-jEO!;(Gh>T5D`O<qH
zvc3EmYw7L|*_g%3(AZff5~;4cTu@nPGaoAHYi(o=5*p$7L=H=!yRvUlPo7&DcUSTS
z<Sn5qdIPeoZM>FasJs+HSJ<;)oKSi3g51AXuhLN^N2DfHrKWQW_DC+wACfSQ;%tLO
zNS?|r?5UbwgcyT?=^(XJa%JvF1$9EPe2Yb;<lAhqY_?eRv)N+VY_Z5kShOXpdI5Tx
zeU$(e))`7C9iL&v_i@XvK2ESauUHSE(AG;+S}y^ZVC-8oFE0nkX+M7cY5!(#?OR-v
z+U%{>eq6k_Mp1y4ZLM93GOO&YsSI)?VGTm59g9Nbu$W^5A5!5dFo3zV0TH}KIn*?U
z>Rf95G)X%n=A6OmOKY1w#?2n%+I3%Sk8$b`rLkEeCqF_q#Xg~lPFPit8TxRU`O%l~
z3IbEX^(PUWuPOj24seWy@>-#X!nj5A;S&s3`YhsRuY0rC{cYM((%j}E&wsfBColq+
zq;a8iv$4L}Sht^VR3$bW>;DoP>(`ro_07KeW?#MT+3c%t_SGBd*zBus_SLP5>+Y*x
zztFaN^Ju4cw3oR7IVMFFDDH%p+p?;=^DXb}7dG)<E6O&T_?u09^=vlrH=FqK*=*v=
zXS0dl(2~t2{-0|7YqN=8`*E|0zuCm!Y~mN5%_hG6Y&P-Nth?F7U*Z>SHu1}h+-&04
z71(Uzuil8wCVq+DzovV!*~H&$;%_$bH=Fq1{wDsoY5TsgP2UK5vwi<Bv3;M1dc2S>
z<OFQOTFPu(AU~V1i@!+N#dAeh0Kig~pz_u#D9ejnLY{;$033y3b{nKl6fLhCRdDnT
zllD~$HSI9l;A+vXX>oW&NQhvu{w5scD}{sPZx%;`<XnTkuxn_1R?g1dYRMla@wWWw
zlUNNHtPei^>L|o${If})EndEKcJ)91Q=k8zBgR?V{2Yp(YvlVcKa2DKzkc)fO|O*y
zzw_p8XOsW`IUd(_9hPD)l)8E)y1dYsIfWE&ZdOo=gyYCEea8V{3%~@+BAEBhE+CUv
zS5hiGBcaXeBBd+_N-8#F3{jpL2Nz)Wz7(B9CVlHdAFE&<C{->FlZ3Tr-K^{svLk(q
zdBLhmKSGRgvI$n}O&p0NS<Mj2t<x=&_nO6HMC+<cRQir&gEzm)z<MF?0I=Rx*n&Q#
zu&{G2cPBDLUTKh*j+BDu)++kSfV0M%XAAsvaddD!82&i898^#i#u1p5y&QSzO6(UI
z&{Q~rF$~by9nJgl67?m;bH+Bcwy9=z5k<#)<Gn2uo}w`F*t9LLhiQQBcD!!Kd#i*<
z-+`q2W3j}jvMBe^9wI6Xal5>^MyziZY23H(zWX0;xA*$Z{saGddWn26Ws1kyT3JC&
zS%UoR!n38kUk%3B)n0+kGuXTca({YSR=1~DtL1vKm|(*>uh~Yt1kviz6A3p7VT}6r
z1vK?_r9A07;ue^AF_f7bpRCerc6Fg<K`rD6v;eocAvZ2!w{+jW4X+ROpOQGOb@G1e
ze9bf?xb(hs!ybwfJ_n<@VPBQ7wWzELUy-B*5-9H@<zY#%G+AzT^<I;dl{-k=k#g(t
zM0OaC^<qZ3pNjV^<`lw_-v^&Qeac?=!iInO^5t21RH33m$<uLj%f1jdzfDOoxpISV
z9$B_rqLh0$5apJ!Nd77#TcC`(*DEzjy<GmDli}(iB$~TZNJp0WGGFE-rS`X)rkxS~
zh}NwoL$x42c7AOb-^<N<6qari7Mn#<lFHW}uH=5bgu`Cb?Bey0XX`rhjqO*_3E9Z;
ztnB!cIi-){`Ximy<BMZ?F?W8sYq=-HNU3*rtA(G|(8ZV^8pt(fu8{~l0s21Ha`y&F
zkfYXRtQEjV8?Oq*TNYV$YHqt~YJkzPG7Q{NqE|W}AvhWK1y*o@rj{>U7qbrQO8BL%
zsUyE`O8)RB<!B0RT6l|p-<~-?67@xPv3`{Zb-8|%FBX%y*z@*X`-0K=efhNmc1|%x
z31OHMIu}El8fiRzFRT|M-Y!g8I1J?4K~G*{sau@2q7U%ojPMI}1ng<WZz;nnsK0__
zG%~2Kd7_-Xl0{it`eV#X)gNn%)^JS<W~h!Ai<iYfI!a@n_9w)Lq1)^9dY#wZhv-WK
zAy1<-RSvJCK{4hhYiiLLjj**Tm+R4+-fD{U0)74!wQaeSEz&r}%)a4YX|$P<FpczW
z?3INMEemR9CD$7!#R^aAg%pj7!t+7V)j(L_Ck1*I`6GVvmE@tBZ1G#tbpiRb+FR`z
zq&h}}wF5$eECS-`&@b>qvSsSv7P)NZoA`-FW+y?Z^PkT9dv<Oo!E>_u$<cM!YO2c~
zJi}j1!%EVX1nw=Gv+mPk?>&eEZGGlgQsmCM-uTI>T8AgSCSB9<QWbS$h?iAOx9ouZ
zfJ0=dl$wuE2+4@a_|*rkHsXGJLP#t7s^FaIMJOxA@I{nWllM$YDlqA-Ugh$jcm`&W
z<^y6r&gm{<fW+Y(kQj-AI6I;GWZXjWtU{>uBJbjh^P}O}!G}TNqptA-B~djlXo68V
zzC@F{xG?$cqGroZ@<;Op9G{;bpALox7Z;}|hX>au=V!yi%fZp$?E2*3^eSJioyZ|t
z4*&p;$81SegW;uyZxqiyc7I*Wc*XXmET{@~b-ZuiqPh1QBXNnnXFpvW|9CF@H0NXz
zlsIWhH8Sm)M&UJ>W;JXHf097)M4h;=C}h!I77JO9$sR}<jst)`V<z*nScc8wl+63E
zh*#p_D26dV8TY|9iIL0ih|8xGp*%WM<z<m2<QG|n#8wGI$CYJmx6MmelA*_{?U(AK
zga7*JaxlCeoE@B94^NJ&JymB^6wU9^yw<EJz_rb+l)Xjse#Yu2X?AaoW*?rO3|_9;
zMt+{8*{|1c_SN9<a&Y~EP1i@c9;)R5iiL-T#xJerc5C`zJDUH+Rl7d^X$?KMW27p!
z9#3*FcM#8h7M(9gz!=@xrR)7-U8C$7D_I{NUk(P>CuheEez2zA4Jbl|gS8n~`k?g9
zAUHTXzy5J>Ia~!1j0vA2x;D1IthZT*x`~lXDOfDQS`;fh&!2diFn~3>{h6q3lBhy3
zB8kmRvrgyGXHMZDo&hY+l`mI0Q=zPC2fthmua4diPtOmIhKJ{8Kb++3(7s=*+xpiN
z=tX>~a3@>0)#qXICEV;NMcoFn2`R0X{)%h2IYkX4c^x^z%Bw^G)%C>6X%PTI9N|*b
zc9Ql%x6`o$f+G~kZH8{|yAL>fZ&D<#U;D}A)9$olZx=+M+R7$cn_Jt|;?*H#aeit!
zWs#s+rJhv43}zKOad^>0iYB92;+d8bY=n(H>e?<-;~IRiH<XcX8Y<2fxL|>w7zb=A
zr&L<DVxamuoRg(z{(<i+$M;Y|$~~#Pd4jBOn%OnYX|i;Ror24HsC^)3>sAh;xtmR~
zo@T}NrMX&eP8KS)MBNJ|o@o*6F}x~mimbz>APKr_py)jeMXwn}zMGY?RhaQ3Oy%j#
z<y}-TG?rGZ+jlwHT@yiAAWpsNRla?DeO}YJuha9ZAX?u4Tcus8CE8n%1O^}j6H%*i
rM*k<==~_!JY*JV6nvB$!J|Vh!HqYkyt3Llf00960aDHDr04f0h#l^WR

literal 0
HcmV?d00001

diff --git a/go.mod b/go.mod
index e172baf1..977e7780 100644
--- a/go.mod
+++ b/go.mod
@@ -1,7 +1,7 @@
 module github.com/isindir/sops-secrets-operator
 
 // UPDATE_HERE
-go 1.17
+go 1.18
 
 require (
 	github.com/go-logr/logr v1.2.2
@@ -9,9 +9,9 @@ require (
 	github.com/onsi/gomega v1.18.1
 	github.com/sirupsen/logrus v1.8.1
 	go.mozilla.org/sops/v3 v3.7.2
-	k8s.io/api v0.23.1
-	k8s.io/apimachinery v0.23.1
-	k8s.io/client-go v0.23.1
+	k8s.io/api v0.23.3
+	k8s.io/apimachinery v0.23.3
+	k8s.io/client-go v0.23.3
 	sigs.k8s.io/controller-runtime v0.11.1
 )
 
@@ -108,8 +108,8 @@ require (
 	k8s.io/component-base v0.23.0 // indirect
 	k8s.io/klog/v2 v2.30.0 // indirect
 	k8s.io/kube-openapi v0.0.0-20211115234752-e816edb12b65 // indirect
-	k8s.io/utils v0.0.0-20210930125809-cb0fa318a74b // indirect
+	k8s.io/utils v0.0.0-20211116205334-6203023598ed // indirect
 	sigs.k8s.io/json v0.0.0-20211020170558-c049b76a60c6 // indirect
-	sigs.k8s.io/structured-merge-diff/v4 v4.2.0 // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.2.1 // indirect
 	sigs.k8s.io/yaml v1.3.0 // indirect
 )
diff --git a/go.sum b/go.sum
index 9ac9d1e9..9a17b168 100644
--- a/go.sum
+++ b/go.sum
@@ -1,7 +1,6 @@
 cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
 cloud.google.com/go v0.34.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
 cloud.google.com/go v0.38.0/go.mod h1:990N+gfupTy94rShfmMCWGDn0LpTmnzTp2qbd1dvSRU=
-cloud.google.com/go v0.43.0/go.mod h1:BOSR3VbTLkk6FDC/TcffxP4NF/FFBGA5ku+jvKOP7pg=
 cloud.google.com/go v0.44.1/go.mod h1:iSa0KzasP4Uvy3f1mN/7PiObzGgflwredwwASm/v6AU=
 cloud.google.com/go v0.44.2/go.mod h1:60680Gw3Yr4ikxnPRS/oxxkBccT6SA1yMk63TGekxKY=
 cloud.google.com/go v0.45.1/go.mod h1:RpBamKRgapWJb87xiFSdk4g1CME7QZg3uwTez+TSTjc=
@@ -45,7 +44,6 @@ filippo.io/age v1.0.0-beta7/go.mod h1:chAuTrTb0FTTmKtvs6fQTGhYTvH9AigjN1uEUsvLdZ
 filippo.io/edwards25519 v1.0.0-alpha.2/go.mod h1:X+pm78QAUPtFLi1z9PYIlS/bdDnvbCOGKtZ+ACWEf7o=
 github.com/Azure/azure-sdk-for-go v31.2.0+incompatible h1:kZFnTLmdQYNGfakatSivKHUfUnDZhqNdchHD4oIhp5k=
 github.com/Azure/azure-sdk-for-go v31.2.0+incompatible/go.mod h1:9XXNKU+eRnpl9moKnB4QOLf1HestfXbmab5FXxiDBjc=
-github.com/Azure/go-ansiterm v0.0.0-20170929234023-d6e3b3328b78/go.mod h1:LmzpDX56iTiv29bbRTIsUNlaFfuhWRQBWjQdVyAevI8=
 github.com/Azure/go-ansiterm v0.0.0-20210608223527-2377c96fe795/go.mod h1:LmzpDX56iTiv29bbRTIsUNlaFfuhWRQBWjQdVyAevI8=
 github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 h1:UQHMgLO+TxOElx5B5HZ4hJQsoJ/PvUvKRhJHDQXO8P8=
 github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E=
@@ -84,11 +82,9 @@ github.com/Azure/go-autorest/tracing v0.6.0/go.mod h1:+vhtPC754Xsa23ID7GlGsrdKBp
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
 github.com/Microsoft/go-winio v0.4.14 h1:+hMXMk01us9KgxGb7ftKQt2Xpf5hH/yky+TDA+qxleU=
-github.com/Microsoft/go-winio v0.4.14/go.mod h1:qXqCSQ3Xa7+6tgxaGTIe4Kpcdsi+P8jBhyzoq1bpyYA=
 github.com/NYTimes/gziphandler v0.0.0-20170623195520-56545f4a5d46/go.mod h1:3wb06e3pkSAbeQ52E9H9iFoQsEEwGN64994WTCIhntQ=
 github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c=
 github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5 h1:TngWCqHvy9oXAN6lEVMRuU21PR1EtLVZJmdB18Gu3Rw=
-github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5/go.mod h1:lmUJ/7eu/Q8D7ML55dXQrVaamCz2vxCfdQBasLZfHKk=
 github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU=
 github.com/PuerkitoBio/purell v1.1.1/go.mod h1:c11w/QuzBsJSee3cPx9rAFu61PvFxuPbtSwDGJws/X0=
 github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578/go.mod h1:uGdkoq3SwY9Y+13GIhn11/XLaGBb4BfwItxLd5jeuXE=
@@ -120,12 +116,10 @@ github.com/bketelsen/crypt v0.0.3-0.20200106085610-5cbc8cc4026c/go.mod h1:MKsuJm
 github.com/bketelsen/crypt v0.0.4/go.mod h1:aI6NrJ0pMGgvZKL1iVgXLnfIFJtfV+bKCoqOes/6LfM=
 github.com/blang/semver v3.5.1+incompatible/go.mod h1:kRBLl5iJ+tD4TcOOxsy/0fnwebNt5EWlYSAyrTnjyyk=
 github.com/cenkalti/backoff v2.2.1+incompatible h1:tNowT99t7UNflLxfYYSlKYsBpXdEet03Pg2g16Swow4=
-github.com/cenkalti/backoff v2.2.1+incompatible/go.mod h1:90ReRw6GdpyfrHakVjL/QHaoyV4aDUVVkXQJJJ3NXXM=
 github.com/census-instrumentation/opencensus-proto v0.2.0/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
 github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
 github.com/certifi/gocertifi v0.0.0-20191021191039-0944d244cd40/go.mod h1:sGbDF6GwGcLpkNXPUTkMRoywsNa/ol15pxFe6ERfguA=
 github.com/certifi/gocertifi v0.0.0-20200922220541-2c3bb06c6054/go.mod h1:sGbDF6GwGcLpkNXPUTkMRoywsNa/ol15pxFe6ERfguA=
-github.com/cespare/xxhash v1.1.0 h1:a6HrQnmkObjyL+Gs60czilIUGqrzKutQD6XZog3p+ko=
 github.com/cespare/xxhash v1.1.0/go.mod h1:XrSqR1VqqWfGrhpAt58auRo0WTKS1nRRg3ghfAqPWnc=
 github.com/cespare/xxhash/v2 v2.1.1 h1:6MnRN8NT7+YBpUIWxHtefFZOKTAPgGjpQSxqLNn0+qY=
 github.com/cespare/xxhash/v2 v2.1.1/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
@@ -141,7 +135,6 @@ github.com/cockroachdb/datadriven v0.0.0-20200714090401-bf6692d28da5/go.mod h1:h
 github.com/cockroachdb/errors v1.2.4/go.mod h1:rQD95gz6FARkaKkQXUksEje/d9a6wBJoCr5oaCLELYA=
 github.com/cockroachdb/logtags v0.0.0-20190617123548-eb05cc24525f/go.mod h1:i/u985jwjWRlyHXQbwatDASoW0RMlZ/3i9yJHE2xLkI=
 github.com/containerd/continuity v0.0.0-20190426062206-aaeac12a7ffc h1:TP+534wVlf61smEIq1nwLLAjQVEK2EADoW3CX9AuT+8=
-github.com/containerd/continuity v0.0.0-20190426062206-aaeac12a7ffc/go.mod h1:GL3xCUCBDV3CZiTSEKksMWbLE66hEyuu9qyDOOqM47Y=
 github.com/coreos/bbolt v1.3.2/go.mod h1:iRUV2dpdMOn7Bo10OQBFzIJO9kkE559Wcmn+qkEiiKk=
 github.com/coreos/etcd v3.3.13+incompatible/go.mod h1:uF7uidLiAD3TWHmW31ZFd/JWoc32PjwdhPthX9715RE=
 github.com/coreos/go-oidc v2.1.0+incompatible/go.mod h1:CgnwVTmzoESiwO9qyAFEMiHoZ1nMCKZlZ9V6mm3/LKc=
@@ -160,9 +153,7 @@ github.com/dgryski/go-sip13 v0.0.0-20181026042036-e10d5fee7954/go.mod h1:vAd38F8
 github.com/dimchansky/utfbom v1.1.0 h1:FcM3g+nofKgUteL8dm/UpdRXNC9KmADgTpLKsu0TRo4=
 github.com/dimchansky/utfbom v1.1.0/go.mod h1:rO41eb7gLfo8SF1jd9F8HplJm1Fewwi4mQvIirEdv+8=
 github.com/docker/go-connections v0.4.0 h1:El9xVISelRB7BuFusrZozjnkIM5YnzCViNKohAFqRJQ=
-github.com/docker/go-connections v0.4.0/go.mod h1:Gbd7IOopHjR8Iph03tsViu4nIes5XhDvyHbTtUxmeec=
 github.com/docker/go-units v0.4.0 h1:3uh0PgVws3nIA0Q+MwDC8yjEPf9zjRfZZWXZYDct3Tw=
-github.com/docker/go-units v0.4.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
 github.com/docopt/docopt-go v0.0.0-20180111231733-ee0de3bc6815/go.mod h1:WwZ+bS3ebgob9U8Nd0kOddGdZWjyMGR8Wziv+TBNwSE=
 github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk=
 github.com/eapache/go-resiliency v1.1.0/go.mod h1:kFI+JgMyC7bLPUVY133qvEBtVayf5mFgVsvEsIPBvNs=
@@ -302,7 +293,6 @@ github.com/google/pprof v0.0.0-20210122040257-d980be63207e/go.mod h1:kpwsk12EmLe
 github.com/google/pprof v0.0.0-20210226084205-cbba55b83ad5/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
 github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
 github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI=
-github.com/google/shlex v0.0.0-20181106134648-c34317bd91bf/go.mod h1:RpwtwJQFrIEPstU94h88MWPXP2ektJZ8cZ0YntAmXiE=
 github.com/google/uuid v1.1.2 h1:EVhdT+1Kseyi1/pUmXKaFxYsDNy9RQYkMWRH68J/W7Y=
 github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/googleapis/gax-go/v2 v2.0.4/go.mod h1:0Wqv26UfaUD9n4G6kQubkQ+KchISgw+vpHVxEJEs9eg=
@@ -316,7 +306,6 @@ github.com/gorilla/context v1.1.1/go.mod h1:kBGZzfjB9CEq2AlWe17Uuf7NDRt0dE0s8S51
 github.com/gorilla/mux v1.6.2/go.mod h1:1lud6UwP+6orDFRuTfBEV8e9/aOM/c4fVVCaMa2zaAs=
 github.com/gorilla/mux v1.8.0/go.mod h1:DVbg23sWSpFRCP0SfiEN6jmj59UnW/n46BH5rLB71So=
 github.com/gorilla/websocket v1.4.2/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
-github.com/gotestyourself/gotestyourself v2.2.0+incompatible/go.mod h1:zZKM6oeNM8k+FRljX1mnzVYeS8wiGgQyvST1/GafPbY=
 github.com/goware/prefixer v0.0.0-20160118172347-395022866408 h1:Y9iQJfEqnN3/Nce9cOegemcy/9Ai5k3huT6E80F3zaw=
 github.com/goware/prefixer v0.0.0-20160118172347-395022866408/go.mod h1:PE1ycukgRPJ7bJ9a1fdfQ9j8i/cEcRAoLZzbxYpNB/s=
 github.com/gregjones/httpcache v0.0.0-20180305231024-9cad4c3443a7/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA=
@@ -479,15 +468,11 @@ github.com/onsi/gomega v1.17.0/go.mod h1:HnhC7FXeEQY45zxNK3PPoIUhzk/80Xly9PcubAl
 github.com/onsi/gomega v1.18.1 h1:M1GfJqGRrBrrGGsbxzV5dqM2U2ApXefZCQpkukxYRLE=
 github.com/onsi/gomega v1.18.1/go.mod h1:0q+aL8jAiMXy9hbwj2mr5GziHiwhAIQpFmmtT5hitRs=
 github.com/opencontainers/go-digest v1.0.0-rc1 h1:WzifXhOVOEOuFYOJAW6aQqW0TooG2iki3E3Ii+WN7gQ=
-github.com/opencontainers/go-digest v1.0.0-rc1/go.mod h1:cMLVZDEM3+U2I4VmLI6N8jQYUd2OVphdqWwCJHrFt2s=
 github.com/opencontainers/image-spec v1.0.1 h1:JMemWkRwHx4Zj+fVxWoMCFm/8sYGGrUVojFA6h/TRcI=
-github.com/opencontainers/image-spec v1.0.1/go.mod h1:BtxoFyWECRxE4U/7sNtV5W15zMzWCbyJoFRP3s7yZA0=
 github.com/opencontainers/runc v0.1.1 h1:GlxAyO6x8rfZYN9Tt0Kti5a/cP41iuiO2yYT0IJGY8Y=
-github.com/opencontainers/runc v0.1.1/go.mod h1:qT5XzbpPznkRYVz/mWwUaVBUv2rmF59PVA73FjuZG0U=
 github.com/opentracing/opentracing-go v1.1.0/go.mod h1:UkNAQd3GIcIGf0SeVgPpRdFStlNbqXla1AfSYxPUl2o=
 github.com/openzipkin/zipkin-go v0.1.6/go.mod h1:QgAqvLzwWbR/WpD4A3cGpPtJrZXNIiJc5AZX7/PBEpw=
 github.com/ory/dockertest v3.3.4+incompatible h1:VrpM6Gqg7CrPm3bL4Wm1skO+zFWLbh7/Xb5kGEbJRh8=
-github.com/ory/dockertest v3.3.4+incompatible/go.mod h1:1vX4m9wsvi00u5bseYwXaSnhNrne+V0E6LAcBILJdPs=
 github.com/pascaldekloe/goe v0.0.0-20180627143212-57f6aae5913c/go.mod h1:lzWF7FIEvWOWxwDKqyGYQf6ZUaNfKdP144TG7ZOy1lc=
 github.com/pascaldekloe/goe v0.1.0/go.mod h1:lzWF7FIEvWOWxwDKqyGYQf6ZUaNfKdP144TG7ZOy1lc=
 github.com/pelletier/go-toml v1.2.0/go.mod h1:5z9KED0ma1S8pY6P1sdut58dfprrGBbd/94hg7ilaic=
@@ -547,14 +532,12 @@ github.com/sergi/go-diff v1.1.0 h1:we8PVUC3FE2uYfodKH/nBHMSetSfHDR6scGdBi+erh0=
 github.com/sergi/go-diff v1.1.0/go.mod h1:STckp+ISIX8hZLjrqAeVduY0gWCT9IjLuqbuNXdaHfM=
 github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
 github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
-github.com/sirupsen/logrus v1.4.1/go.mod h1:ni0Sbl8bgC9z8RoU9G6nDWqqs/fq4eDPysMBDgk/93Q=
 github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
 github.com/sirupsen/logrus v1.6.0/go.mod h1:7uNnSEd1DgxDLC74fIahvMZmmYsHGZGEOFrfsX/uA88=
 github.com/sirupsen/logrus v1.7.0/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
 github.com/sirupsen/logrus v1.8.1 h1:dJKuHgqk1NNQlqoA6BTlM1Wf9DOH3NBjQyu0h9+AZZE=
 github.com/sirupsen/logrus v1.8.1/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
 github.com/smartystreets/assertions v0.0.0-20180927180507-b2de0cb4f26d/go.mod h1:OnSkiWE9lh6wB0YB77sQom3nweQdgAjqCqsofrRNTgc=
-github.com/smartystreets/goconvey v0.0.0-20190710185942-9d28bd7c0945/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA=
 github.com/smartystreets/goconvey v1.6.4/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA=
 github.com/soheilhy/cmux v0.1.4/go.mod h1:IM3LyeVVIOuxMH7sFAkER9+bJ4dT7Ms6E4xg4kGIyLM=
 github.com/soheilhy/cmux v0.1.5/go.mod h1:T7TcVDs9LWfQgPlPsdngu6I6QIoyIFZDDC6sNE1GqG0=
@@ -635,7 +618,6 @@ go.uber.org/atomic v1.7.0/go.mod h1:fEN4uk6kAWBTFdckzkM89CLk9XfWZrxpCo0nPH17wJc=
 go.uber.org/goleak v1.1.10/go.mod h1:8a7PlsEVH3e/a/GLqe5IIrQx6GzcnRmZEufDUTk4A7A=
 go.uber.org/goleak v1.1.11-0.20210813005559-691160354723/go.mod h1:cwTWslyiVhfpKIDGSZEM2HlOvcqm+tG4zioyIeLoqMQ=
 go.uber.org/goleak v1.1.12 h1:gZAh5/EyT/HQwlpkCy6wTpqfH9H8Lz8zbm3dZh+OyzA=
-go.uber.org/goleak v1.1.12/go.mod h1:cwTWslyiVhfpKIDGSZEM2HlOvcqm+tG4zioyIeLoqMQ=
 go.uber.org/multierr v1.1.0/go.mod h1:wR5kodmAFQ0UK8QlbwjlSNy0Z68gJhDJUG5sjR94q/0=
 go.uber.org/multierr v1.6.0 h1:y6IPFStTAIT5Ytl7/XYmHvzXQ7S3g/IeZW9hyZ5thw4=
 go.uber.org/multierr v1.6.0/go.mod h1:cdWPpRnG4AhwMwsgIHip0KRBQjJy5kYEpYjJxpXp9iU=
@@ -655,7 +637,6 @@ golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8U
 golang.org/x/crypto v0.0.0-20200323165209-0ec3e9974c59/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20201002170205-7f63de1d35b0/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
-golang.org/x/crypto v0.0.0-20210220033148-5ea612d1eb83/go.mod h1:jdWPYTVW3xRLrWPugEBEK3UY2ZEsg3UU495nc5E+M+I=
 golang.org/x/crypto v0.0.0-20210817164053-32db794688a5 h1:HWj/xjIHfjYU5nVXpTM0s39J9CbLn7Cc5a7IC5rwsMQ=
 golang.org/x/crypto v0.0.0-20210817164053-32db794688a5/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
@@ -836,10 +817,8 @@ golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210809222454-d867a43fc93e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210831042530-f4d43177bf5e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20211029165221-6e7872819dc8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e h1:fLOSk5Q00efkSvAm+4xcoXD+RRmLmmulPn5I3Y9F2EM=
 golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210615171337-6886f2dfbf5b h1:9zKuko04nR4gjZ4+DNjHqRlAJqbJETHwiNKDqTfOjfE=
 golang.org/x/term v0.0.0-20210615171337-6886f2dfbf5b/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
@@ -965,7 +944,6 @@ google.golang.org/genproto v0.0.0-20190404172233-64821d5d2107/go.mod h1:VzzqZJRn
 google.golang.org/genproto v0.0.0-20190418145605-e7d98fc518a7/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
 google.golang.org/genproto v0.0.0-20190425155659-357c62f0e4bb/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
 google.golang.org/genproto v0.0.0-20190502173448-54afdca5d873/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
-google.golang.org/genproto v0.0.0-20190716160619-c506a9f90610/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
 google.golang.org/genproto v0.0.0-20190801165951-fa694d86fc64/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
 google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
 google.golang.org/genproto v0.0.0-20190911173649-1774047e7e51/go.mod h1:IbNlFCBrqXvoKpeg0TB2l7cyZUmoaFKYIwrEpbDKLA8=
@@ -1059,7 +1037,6 @@ gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
 gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
 gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
 gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
-gopkg.in/ini.v1 v1.44.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
 gopkg.in/ini.v1 v1.51.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
 gopkg.in/ini.v1 v1.62.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
 gopkg.in/natefinch/lumberjack.v2 v2.0.0/go.mod h1:l0ndWWf7gzL7RNwBG7wST/UCcT4T24xpD6X8LsfU/+k=
@@ -1069,7 +1046,6 @@ gopkg.in/square/go-jose.v2 v2.3.1 h1:SK5KegNXmKmqE342YYN2qPHEnUYeoMiXXl1poUlI+o4
 gopkg.in/square/go-jose.v2 v2.3.1/go.mod h1:M9dMgbHiYLoDGQrXy7OpJDJWiKiU//h+vD76mk0e1AI=
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ=
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw=
-gopkg.in/urfave/cli.v1 v1.20.0/go.mod h1:vuBzUtMdQeixQj8LVd+/98pzhxNGQoyuPBlsXHOQNO0=
 gopkg.in/yaml.v2 v2.0.0-20170812160011-eb3733d160e7/go.mod h1:JAlM8MvJe8wmxCU4Bli9HhUf9+ttbYbLASfIpnQbh74=
 gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
@@ -1082,10 +1058,8 @@ gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
 gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.0-20200615113413-eeeca48fe776/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-gopkg.in/yaml.v3 v3.0.0-20210107172259-749611fa9fcc/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b h1:h8qDotaEPuJATrMmW04NCwg7v22aHH28wwpauUhK9Oo=
 gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-gotest.tools v2.2.0+incompatible/go.mod h1:DsYFclhRJ6vuDpmuTbkuFWG+y2sxOXAzmJt81HFBacw=
 gotest.tools/v3 v3.0.2/go.mod h1:3SzNCllyD9/Y+b5r9JIKQ474KzkZyqLqEfYqMsX94Bk=
 gotest.tools/v3 v3.0.3/go.mod h1:Z7Lb0S5l+klDB31fvDQX8ss/FlKDxtlFlw3Oa8Ymbl8=
 honnef.co/go/tools v0.0.0-20180728063816-88497007e858/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
@@ -1097,17 +1071,17 @@ honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt
 honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
 honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
 k8s.io/api v0.23.0/go.mod h1:8wmDdLBHBNxtOIytwLstXt5E9PddnZb0GaMcqsvDBpg=
-k8s.io/api v0.23.1 h1:ncu/qfBfUoClqwkTGbeRqqOqBCRoUAflMuOaOD7J0c8=
-k8s.io/api v0.23.1/go.mod h1:WfXnOnwSqNtG62Y1CdjoMxh7r7u9QXGCkA1u0na2jgo=
+k8s.io/api v0.23.3 h1:KNrME8KHGr12Ozjf8ytOewKzZh6hl/hHUZeHddT3a38=
+k8s.io/api v0.23.3/go.mod h1:w258XdGyvCmnBj/vGzQMj6kzdufJZVUwEM1U2fRJwSQ=
 k8s.io/apiextensions-apiserver v0.23.0 h1:uii8BYmHYiT2ZTAJxmvc3X8UhNYMxl2A0z0Xq3Pm+WY=
 k8s.io/apiextensions-apiserver v0.23.0/go.mod h1:xIFAEEDlAZgpVBl/1VSjGDmLoXAWRG40+GsWhKhAxY4=
 k8s.io/apimachinery v0.23.0/go.mod h1:fFCTTBKvKcwTPFzjlcxp91uPFZr+JA0FubU4fLzzFYc=
-k8s.io/apimachinery v0.23.1 h1:sfBjlDFwj2onG0Ijx5C+SrAoeUscPrmghm7wHP+uXlo=
-k8s.io/apimachinery v0.23.1/go.mod h1:SADt2Kl8/sttJ62RRsi9MIV4o8f5S3coArm0Iu3fBno=
+k8s.io/apimachinery v0.23.3 h1:7IW6jxNzrXTsP0c8yXz2E5Yx/WTzVPTsHIx/2Vm0cIk=
+k8s.io/apimachinery v0.23.3/go.mod h1:BEuFMMBaIbcOqVIJqNZJXGFTP4W6AycEpb5+m/97hrM=
 k8s.io/apiserver v0.23.0/go.mod h1:Cec35u/9zAepDPPFyT+UMrgqOCjgJ5qtfVJDxjZYmt4=
 k8s.io/client-go v0.23.0/go.mod h1:hrDnpnK1mSr65lHHcUuIZIXDgEbzc7/683c6hyG4jTA=
-k8s.io/client-go v0.23.1 h1:Ma4Fhf/p07Nmj9yAB1H7UwbFHEBrSPg8lviR24U2GiQ=
-k8s.io/client-go v0.23.1/go.mod h1:6QSI8fEuqD4zgFK0xbdwfB/PthBsIxCJMa3s17WlcO0=
+k8s.io/client-go v0.23.3 h1:23QYUmCQ/W6hW78xIwm3XqZrrKZM+LWDqW2zfo+szJs=
+k8s.io/client-go v0.23.3/go.mod h1:47oMd+YvAOqZM7pcQ6neJtBiFH7alOyfunYN48VsmwE=
 k8s.io/code-generator v0.23.0/go.mod h1:vQvOhDXhuzqiVfM/YHp+dmg10WDZCchJVObc9MvowsE=
 k8s.io/component-base v0.23.0 h1:UAnyzjvVZ2ZR1lF35YwtNY6VMN94WtOnArcXBu34es8=
 k8s.io/component-base v0.23.0/go.mod h1:DHH5uiFvLC1edCpvcTDV++NKULdYYU6pR9Tt3HIKMKI=
@@ -1119,8 +1093,9 @@ k8s.io/klog/v2 v2.30.0/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0=
 k8s.io/kube-openapi v0.0.0-20211115234752-e816edb12b65 h1:E3J9oCLlaobFUqsjG9DfKbP2BmgwBL2p7pn0A3dG9W4=
 k8s.io/kube-openapi v0.0.0-20211115234752-e816edb12b65/go.mod h1:sX9MT8g7NVZM5lVL/j8QyCCJe8YSMW30QvGZWaCIDIk=
 k8s.io/utils v0.0.0-20210802155522-efc7438f0176/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
-k8s.io/utils v0.0.0-20210930125809-cb0fa318a74b h1:wxEMGetGMur3J1xuGLQY7GEQYg9bZxKn3tKo5k/eYcs=
 k8s.io/utils v0.0.0-20210930125809-cb0fa318a74b/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
+k8s.io/utils v0.0.0-20211116205334-6203023598ed h1:ck1fRPWPJWsMd8ZRFsWc6mh/zHp5fZ/shhbrgPUxDAE=
+k8s.io/utils v0.0.0-20211116205334-6203023598ed/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
 rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=
 rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
 rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=
@@ -1131,8 +1106,8 @@ sigs.k8s.io/json v0.0.0-20211020170558-c049b76a60c6 h1:fD1pz4yfdADVNfFmcP2aBEtud
 sigs.k8s.io/json v0.0.0-20211020170558-c049b76a60c6/go.mod h1:p4QtZmO4uMYipTQNzagwnNoseA6OxSUutVw05NhYDRs=
 sigs.k8s.io/structured-merge-diff/v4 v4.0.2/go.mod h1:bJZC9H9iH24zzfZ/41RGcq60oK1F7G282QMXDPYydCw=
 sigs.k8s.io/structured-merge-diff/v4 v4.1.2/go.mod h1:j/nl6xW8vLS49O8YvXW1ocPhZawJtm+Yrr7PPRQ0Vg4=
-sigs.k8s.io/structured-merge-diff/v4 v4.2.0 h1:kDvPBbnPk+qYmkHmSo8vKGp438IASWofnbbUKDE/bv0=
-sigs.k8s.io/structured-merge-diff/v4 v4.2.0/go.mod h1:j/nl6xW8vLS49O8YvXW1ocPhZawJtm+Yrr7PPRQ0Vg4=
+sigs.k8s.io/structured-merge-diff/v4 v4.2.1 h1:bKCqE9GvQ5tiVHn5rfn1r+yao3aLQEaLzkkmAkf+A6Y=
+sigs.k8s.io/structured-merge-diff/v4 v4.2.1/go.mod h1:j/nl6xW8vLS49O8YvXW1ocPhZawJtm+Yrr7PPRQ0Vg4=
 sigs.k8s.io/yaml v1.2.0/go.mod h1:yfXDCHCao9+ENCvLSE62v9VSji2MKu5jeNfTrofGhJc=
 sigs.k8s.io/yaml v1.3.0 h1:a2VclLzOGrwOHDiV8EfBGhvjHvP46CtW5j6POvhYGGo=
 sigs.k8s.io/yaml v1.3.0/go.mod h1:GeOyir5tyXNByN85N/dRIT9es5UQNerPYEKK56eTBm8=