title: Manage k8s secrets with Kustomize for microservices
body: <p>Kustomize secrets seem to work fine in a mono-repo scenario with all the deployment config together. How does one deal with microservices where each component is in its own repo? I could move the manifests together in a <code>devops</code> repo, but seems odd to separate the manifest from the respective component.</p>