How do you share configuration between a Container App and Azure Key Vault without storing secrets in environment variables?

1. A Pass secrets via command-line arguments
2. ✓ B Reference Key Vault secrets in Container Apps secrets, then reference them as environment variables (correct answer)
3. C Use an init container to fetch secrets
4. D Store secrets in Azure Storage and mount as volume

Shortcut: Container Apps can reference Key Vault secrets directly in its secrets configuration. These are then available as environment variables or volume mounts to the app.