I like sealed secrets (https://github.com/bitnami-labs/sealed-secrets https://github.com/bitnami-labs/sealed-secrets) a lot. It's like 1Password, but for apps i

I like sealed secrets (https://github.com/bitnami-labs/sealed-secrets https://github.com/bitnami-labs/sealed-secrets) a lot. It's like 1Password, but for apps in kubernetes. You only need to secure a private key, and can throw encrypted secrets in a public github repo or anywhere you want. It's owned by VMware (Broadcom) now, so you have to decide which company you hate less.