diff --git a/.vscode/extensions.json b/.vscode/extensions.json
index 53cc594..46b379d 100644
--- a/.vscode/extensions.json
+++ b/.vscode/extensions.json
@@ -1,8 +1,8 @@
 {
     "recommendations": [
         "editorconfig.editorconfig",
+        "gruntfuggly.todo-tree",
         "nhoizey.gremlins",
-        "oderwat.indent-rainbow",
         "streetsidesoftware.code-spell-checker",
 
         "ianjsikes.md-graph",
diff --git a/.vscode/settings.json b/.vscode/settings.json
index e242ab7..8999dd1 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -56,6 +56,7 @@
         "getfacl",
         "getfattr",
         "gettext",
+        "gitops",
         "gopass",
         "gpgconf",
         "gpgtools",
diff --git a/knowledge base/kubernetes/csi driver.placeholder b/knowledge base/kubernetes/csi driver.placeholder
new file mode 100644
index 0000000..94e4b19
--- /dev/null
+++ b/knowledge base/kubernetes/csi driver.placeholder	
@@ -0,0 +1 @@
+https://kubernetes-csi.github.io/docs/
diff --git a/knowledge base/kubernetes/external-secrets.placeholder b/knowledge base/kubernetes/external-secrets.placeholder
new file mode 100644
index 0000000..3491aa0
--- /dev/null
+++ b/knowledge base/kubernetes/external-secrets.placeholder	
@@ -0,0 +1,2 @@
+https://external-secrets.io/main/
+https://github.com/external-secrets/external-secrets
diff --git a/knowledge base/kubernetes/helm.md b/knowledge base/kubernetes/helm.md
index 1ee6026..068d950 100644
--- a/knowledge base/kubernetes/helm.md	
+++ b/knowledge base/kubernetes/helm.md	
@@ -6,6 +6,7 @@ Package manager for Kubernetes.
 
 1. [TL;DR](#tldr)
 1. [Start managing existing resources with a specific helm chart](#start-managing-existing-resources-with-a-specific-helm-chart)
+1. [Plugins](#plugins)
 1. [Further readings](#further-readings)
 
 ## TL;DR
@@ -111,6 +112,10 @@ To achieve this:
    helm upgrade 'app-release-name'
    ```
 
+## Plugins
+
+TODO
+
 ## Further readings
 
 - [Website]
diff --git a/knowledge base/kubernetes/krew.placeholder b/knowledge base/kubernetes/krew.placeholder
new file mode 100644
index 0000000..bce753c
--- /dev/null
+++ b/knowledge base/kubernetes/krew.placeholder	
@@ -0,0 +1,3 @@
+https://krew.sigs.k8s.io/
+https://github.com/kubernetes-sigs/krew/
+https://kubernetes.io/docs/tasks/extend-kubectl/kubectl-plugins/
diff --git a/knowledge base/kubernetes/kubectl.md b/knowledge base/kubernetes/kubectl.md
index ad9a1e7..24b6a5c 100644
--- a/knowledge base/kubernetes/kubectl.md	
+++ b/knowledge base/kubernetes/kubectl.md	
@@ -31,6 +31,7 @@ One possible output format is [JSONpath].
 1. [Create resources](#create-resources)
 1. [Output formatting](#output-formatting)
 1. [Verbosity and debugging](#verbosity-and-debugging)
+1. [Plugins](#plugins)
 1. [Further readings](#further-readings)
 1. [Sources](#sources)
 
@@ -587,6 +588,10 @@ Verbosity | Description
 `--v=8`   | Display HTTP request contents.
 `--v=9`   | Display HTTP request contents without truncation of contents.
 
+## Plugins
+
+TODO
+
 ## Further readings
 
 - [Kubernetes]
@@ -596,6 +601,7 @@ Verbosity | Description
 - [Configure access to multiple clusters]
 - [Configure a Security Context for a Pod or Container]
 - [Enforce Pod Security Standards with Namespace Labels]
+- [Krew]
 
 ## Sources
 
@@ -605,6 +611,7 @@ All the references in the [further readings] section, plus the following:
 - [Run a single-instance stateful application]
 - [Run a replicated stateful application]
 - [Accessing an application on Kubernetes in Docker]
+- [Plugins]
 
 <!--
   References
@@ -617,6 +624,7 @@ All the references in the [further readings] section, plus the following:
 [configure a security context for a pod or container]: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
 [configure access to multiple clusters]: https://kubernetes.io/docs/tasks/access-application-cluster/configure-access-multiple-clusters/
 [enforce pod security standards with namespace labels]: https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-namespace-labels/
+[plugins]: https://kubernetes.io/docs/tasks/extend-kubectl/kubectl-plugins/
 [taints and tolerations]: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
 
 <!-- In-article sections -->
@@ -624,6 +632,7 @@ All the references in the [further readings] section, plus the following:
 
 <!-- Knowledge base -->
 [jsonpath]: ../jsonpath.md
+[krew]: krew.md
 [kubernetes]: README.md
 
 <!-- Others -->
diff --git a/knowledge base/kubernetes/security.md b/knowledge base/kubernetes/security.md
index 393e127..9d2abde 100644
--- a/knowledge base/kubernetes/security.md	
+++ b/knowledge base/kubernetes/security.md	
@@ -15,6 +15,7 @@
 All the references in the [further readings] section, plus the following:
 
 - [Canals and bridges: using Amsterdam's transit system to secure K8S networks by Cailyn Edwards]
+- [100,000 different ways to manage secrets in gitops by Andrew Block, Red Hat]
 
 <!--
   References
@@ -28,4 +29,5 @@ All the references in the [further readings] section, plus the following:
 [network policies]: network%20policies.md
 
 <!-- Others -->
+[100,000 different ways to manage secrets in gitops by andrew block, red hat]: https://www.youtube.com/watch?v=FVaaqP7_AJg
 [canals and bridges: using amsterdam's transit system to secure k8s networks by cailyn edwards]: https://www.youtube.com/watch?v=N1XvgWXnEik
diff --git a/knowledge base/sops.placeholder b/knowledge base/sops.placeholder
new file mode 100644
index 0000000..0507130
--- /dev/null
+++ b/knowledge base/sops.placeholder	
@@ -0,0 +1,3 @@
+https://github.com/getsops/sops
+https://fluxcd.io/flux/guides/mozilla-sops/
+https://itnext.io/goodbye-sealed-secrets-hello-sops-3ee6a92662bb