[auspex]

The two other ways I’ve seen is a direct dependency on the secrets manager or injecting files.

Environment variables seem to be the standard.

Direct dependency is usually bad and injecting files violates the immutable nature of a container.

[XorNot]

I wouldn't consider binding files to be a violation of container immutability, which is how K8S secrets work.