This doesn’t cover setting up encryption at rest for secrets, which, combined with RBAC for authorization, does provide some actual security. GKE encrypts secre

This doesn’t cover setting up encryption at rest for secrets, which, combined with RBAC for authorization, does provide some actual security. GKE encrypts secrets by default with, I believe, Google-managed keys. That being said, I don’t really use kubernetes secrets except to configure applications that expect them. They are a pain to manage. For most things it is better to use your cloud’s built-in secret manager or something like Vault (however Vault is non-trivial to set up correctly).