You need to store sensitive database connection strings for a containerized app in AKS. What is the most secure method to inject these at runtime?
-
A
Mount secrets from Azure Key Vault using the Secrets Store CSI Driver
-
B
Bake credentials into the Docker image during the CI build
-
C
Pass credentials as Docker build arguments stored in pipeline variables
-
D
Store credentials in a Kubernetes ConfigMap referenced by the pod