The ups-sidecar should be able to create iOS variants with the data from the associated secrets and write the variant definition (after successful creation) back into the secret.