SOPS is the best git-friendly secrets management solution I've used. It's also super easy to integrate into anything (provided you use go). Shameless plug: I

SOPS is the best git-friendly secrets management solution I've used. It's also super easy to integrate into anything (provided you use go). Shameless plug: I wrote a simple Kustomize plugin for it https://github.com/omninonsense/kustomize-sopsgenerator https://github.com/omninonsense/kustomize-sopsgenerator you can look at the code how easy it is to integrate as a Kustomize generator plug-in. It's just a few lines of code. I've not maintained it for a while now though