[89vision]

do you have any examples of more secure ways of injecting secrets?

[dharmab]

Check out the Secrets Operator for Kubernetes. Injects your secrets from a secrets store as a file mounted into your container.

[marwis]

And how is /var/run/secrets any more secure than env?

I guess you avoid the risk of accidentally logging secrets with other env variables but otherwise it seems to be just as secure/insecure.

[89vision]

how does the application pick it up? We use the built in secrets that are injected into the container as env vars and then the application picks it up that way. Not trying to sound combative, just looking for better ways to do things.