secretgen-controller provides CRDs to specify what secrets need to be on Kubernetes cluster (to be generated or not) - View it on GitHub