I've been using SOPS daily for more than a year (before the rewrite from python into golang) and it works pretty well. It supports GPG for onprem installs and K

I've been using SOPS daily for more than a year (before the rewrite from python into golang) and it works pretty well. It supports GPG for onprem installs and KMS for AWS. Its main supported filetypes are YAML and JSON files but I've used it with pretty much everything. The main benefit I've seen over other solutions is the ability to check my secrets into git knowing that they are encrypted. This means you can version your secrets while knowing that if your repo accidentally becomes public you won't suddenly end up with compromised servers. Usually for auth hosted services you still have to problem of how do you get the secrets into there in the first place through 100% automation.