How do you handle secrets in Kubernetes, anyway? What's your game plan?

hey everyone im lookin to start a convo about best practices for handling sensitive info like api keys and db creds in kubernetes clusters weve tried a few approaches from basic configmaps to more advanced solutions like hashicorp vault whats your go to method are there any common pitfalls to watch out for when implementing secret management in k8s