Secrets (SQL/LDAP passwords, SSH-keys and API-tokens) are usually kept by application in configuration files or within source code. “Kubernetes Secrets” offers great functionality that enables developers to store and provide the application's secrets to containers, in run-time, on-demand. In our talk, we’ll share several use cases and flaws where Kubernetes built-in Secrets Store is insufficient, and review several future features of K8s and other concepts available in order to better manage and secure your secrets.