> Getting secrets from Kubernetes Secrets API I've seen done but lock in again. I don't get this part. Why would you use Kubernetes secrets alone for storing s

> Getting secrets from Kubernetes Secrets API I've seen done but lock in again. I don't get this part. Why would you use Kubernetes secrets alone for storing secrets if they are not encrypted by default? Using k8s secrets only makes sense if (0) you are using k8s, (1) you already did some groundwork like encryption at rest for the control plane, and (2) you are actually using a solution like Secrets Store CSI Driver (or alternatives - just don't depend on k8s secret being actually more secret than a ConfigMap by default). And then, it's the opposite of lock-in as the Secrets Store CSI Driver uspports multiple backends, including open source Conjur.