Here are some good ways to handle secrets in Kubernetes.

we're setting up a new cluster and i'm looking for advice on how to securely manage secrets like api keys and database passwords. we've looked at kubernetes secrets, but i'm wondering about best practices for encryption at rest, access control, and integrating with external secret managers. what are your go-to solutions and any common pitfalls to avoid?