The helm-secrets plugin offers secret management, it delegates the secret encryption to Mozilla SOPS.