resources:
  - encrypt-ephemeral.yaml
  - encrypt-target.yaml