Recommended way to integrate Kapitan with CI/CD?

[Moep90]

Hey,
I currently try to think of a generic CI-System solution with Kapitan.
For now, I've just a few ideas... Maybe you can share your ideas and solutions around CI/CD.
Imagine having a diverse CI/CD landscape like (Jenkins, Gitlab, Drone,....etc) and want to onboard all teams to use Kapitan to render and deploy their Kubernetes/Terraform/else... artefacts.

What I currently are thinking of is the following:

1. git mgmt (checkout etc.)
2. Kapitan compile [opts like reveal or fetch if required]
3. How to deploy it afterwards? 
   1st idea: Then just run kubectl apply --recrusive -f compiled/<target_name>/<manifestsDir>?
   2nd idea: Let Kapitan render a templated deployment script which then is triggered to deploy the application?

How should Secret management take place?

1. If you aren't able to use GCP (air-gapped env's)
2. I can think of using base64 Kapitan-refs, vault-RO, CI-ENV injection

....To be extended....