We currently use [sealed secrets](https://github.com/bitnami-labs/sealed-secrets). Going forward we will likely introduce [external secrets operator](https://external-secrets.io/latest/) and one of its [associated providers](https://external-secrets.io/latest/provider/) such as aws secrets manager, google cloud secret manager, or [hashicorp vault](https://github.com/hashicorp/vault/blob/82378ae23237bf583c285b25768f3c6ad9fc6364/LICENSE#L20).
We currently use sealed secrets. Going forward we will likely introduce external secrets operator and one of its associated providers such as aws secrets manager, google cloud secret manager, or hashicorp vault.