I wrote a n8n external-secrets HashiCorp Vault shim so you don't have to(medium.com)

https://medium.com/@lustine67/i-shouldnt-have-to-write-this-forcing-n8n-s-external-secret-to-respect-kubernetes-workload-1a528854af8b