Kubernetes Use Azure KeyVault with ASP.NET Core running in an AKS cluster using AAD Pod Identity Azure Key Vault in combination with Managed Identity keeps all secrets out of environment variables in AKS.
terraform Azure Key Vault references for Application Settings with Terraform Keep secrets not only out of your code but also out of your Application Settings. Here is how to configure that with Terraform ensuring that the latest version will be used.