If you run on kubernetes it has first class support for secrets [0]. You can reference secrets in environment variables, or mount them as files in your containers.

[0] https://kubernetes.io/docs/concepts/configuration/secret/