We store our secrets in a key vault exposed as environment variables and store vault credentials as Kubernetes secrets which are also exposed as env vars. The

We store our secrets in a key vault exposed as environment variables and store vault credentials as Kubernetes secrets which are also exposed as env vars. The easy method is to use something like dotenv or a separate config file under gitignore.