We used SealedSecrets which allow us to asym encrypt our secrets to the cluster's key, the we can just stick them in git. https://github.com/bitnami-labs/seale

We used SealedSecrets which allow us to asym encrypt our secrets to the cluster's key, the we can just stick them in git. https://github.com/bitnami-labs/sealed-secrets https://github.com/bitnami-labs/sealed-secrets