An overlay needs Kubernetes Secrets derived from local key files without pasting raw secret YAML into every environment folder by hand. Which Kustomize feature addresses that pattern?
Select an answer to reveal the explanation.
Short Explanation
secretGenerator is the sealed envelope factory for an overlay: feed it files or literals, get a Secret object in the build—still treat the inputs carefully and prefer sealed or external secret workflows in real pipelines.
Full Explanation
Kustomize secretGenerator creates Secrets from declared sources in the kustomization, often with hashed names similar to configMapGenerator. Storing secrets in labels or image tags is unsafe and ineffective. kubectl explain only documents APIs; it does not generate overlay Secrets.