is also multitenant, so secrets cannot be read across namespaces. There’s even a namespaced scoped mode where you can have an External Secrets controller in each namespace that needs it. External Secrets