what's your go-to for managing secrets in kubernetes

hey everyone, i'm looking for some community wisdom on the best practices for managing secrets in kubernetes environments. we're currently using the built-in secrets object, but i'm curious about external secret managers like hashicorp vault or cloud provider solutions. what are your experiences? what challenges have you faced, and what strategies do you find most effective for security and rotation