Probably I just work at more dysfunctional places than you, but: If I'm building product for on prem I'd prefer to use env vars or k8s secrets and let the cust

Probably I just work at more dysfunctional places than you, but: If I'm building product for on prem I'd prefer to use env vars or k8s secrets and let the customer integrate their preferred secrets manager. Also helpful when you run sales POCs where ease of getting to splash page really matters. Building inside enterprise, I've never actually had to support multiple clouds for the same component but if it ever comes up and I have any sort of choice in the matter I would probably rather template 3 native secrets integrations than deal with the special circle of hell that is enterprise-managed Vault or CyberArk.