Too Long; Didn't Read
Berglas is an open-source tool that interfaces with Google Cloud services while abstracting away all the complexity. Under the hood, it uses the Key Management Service (KMS) to encrypt secrets and storage buckets to store them. Alternatively, it can also use the new Google Secret Manager, but I’ll get to that later. It’s secure, easy to use, and easy to manage, and it's highly secure while also easy-to-use. Getting Berglas to work with Kubernetes is perhaps slightly trickier than the other Berglas/Google integrations (Cloud Run, App Engine, and so on).