“You need to make sure that you pass the secret only to Kubernetes, and so only your application will have it but no one else.”

Transcript evidence from Omer Levi Hevroni — K8s can keep a secret?.