What, in this era, replaces secrets handling in Kubernetes in a way thats easy for most devs to pick up?

What, in this era, replaces provisioning cloudy stuff that doesn't require heaps of YAML or a bootstrap Kubernetes cluster for operators to run within?