Alternative to Kubernetes Secrets?

[joebowbeer]

Can Infisical deliver "secrets" to Kubernetes without creating Kubernetes Secrets?

Kubernetes Secrets (I mean the k8s core resource) are not secure and are discouraged by security best practice guidelines. This may seem surprising and counterintuitive, but it should not be news to anyone familiar with CIS Benchmark for Kubernetes, or numerous Kubernetes security best practice guides.

The Secrets Store CSI Driver project delivers secrets to Kubernetes via encrypted folders, and only exports to a Kubernetes Secret if requested.

Can Infisicsl forego Kubernetes Secrets?

[joebowbeer]

In slack @maidul98 writes:

We’ll soon release sidecar based secret fetch approach and this will mount the secrets into the selected deployments without needing to save the secrets as native Kubernetes secrets first

Is there a GitHub issue tracking this work that I can subscribe to?