title: How can I minimize administrator access to secrets in kubernetes?
body: <p>AFAIK administrators can use exec to execute commands in a container running in kubernetes. This means that they can see all the secrets correct?</p>
  
  <p>Now if the secret is used to connect to something externally, which that administrator does not have access to, how can I avoid that the adminstrator gets access to that external system?</p>
  
  <p>Do I need to use something like Hashicorps Vault? </p>