<p>Is there a recommended way to use <a href="https://kubernetes.io/docs/concepts/configuration/secret/" rel="noreferrer">Kubernetes Secrets</a>? They can be exposed as environment variables or using a volume mount. Is one more secure than the other?</p>

<p><a href="https://www.oreilly.com/library/view/velocity-conference-2017/9781491985335/video316233.html" rel="noreferrer">https://www.oreilly.com/library/view/velocity-conference-2017/9781491985335/video316233.html</a></p>

<p>Kubernetes secrets exposed by environment variables may be able to be enumerated on the host via /proc/. If this is the case it's probably safer to load them via volume mounts.</p>
