{ ... }:
{
  sops.secrets = {
    "kubernetes/ca/crt" = {
      owner = "kubernetes";
      group = "users";
      mode = "0440";
    };

    "kubernetes/ca/key" = {
      owner = "kubernetes";
      group = "users";
      mode = "0440";
    };

    "kubernetes/front-proxy/ca/crt" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/front-proxy/ca/key" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/etcd/ca/crt" = {
      owner = "etcd";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/etcd/ca/key" = {
      owner = "etcd";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/apiserver/cert/crt" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/apiserver/cert/key" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/apiserver/kubelet-client/crt" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/apiserver/kubelet-client/key" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/apiserver/etcd-client/crt" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/apiserver/etcd-client/key" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/front-proxy/client/crt" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/front-proxy/client/key" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/etcd/server/crt" = {
      owner = "etcd";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/etcd/server/key" = {
      owner = "etcd";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/etcd/peer/crt" = {
      owner = "etcd";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/etcd/peer/key" = {
      owner = "etcd";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/sa/key" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/sa/pub" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/accounts/admin/crt" = {
      group = "kubernetes";
    };

    "kubernetes/accounts/admin/key" = {
      group = "kubernetes";
    };

    "kubernetes/accounts/controller-manager/crt" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/accounts/controller-manager/key" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/accounts/addon-manager/crt" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/accounts/addon-manager/key" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/accounts/scheduler/crt" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/accounts/scheduler/key" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/accounts/proxy/crt" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/accounts/proxy/key" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/accounts/flannel/crt" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/accounts/flannel/key" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/accounts/kubelet-bootstrap/token" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };

    "kubernetes/accounts/kubelet-bootstrap/csv" = {
      owner = "kubernetes";
      group = "kubernetes";
      mode = "0440";
    };
  };
}