#external-secrets

Kubernetes registry credentials that expire on their own

A GitLab deploy token in an imagePullSecret is a long-lived credential sitting in a namespace, and it does not have to be.