Vault or ENV to manage secrets

Hello guys,

I'm using Master Data Center 12.7 and I have the below scenario:

I have a Kafka Server for development and another one for production, they are set with different username and password, so I need to connect to them:

• Without putting these username and password values directly in my code.
• In a way that MDC recognizes if it need to use development or production values.

So, is there a way to setup it to use secrets (like database and server passwords) managed in Vault by HashiCorp?

If it's not, how can we use ENV variables to achieve the requirements above?

Thank you,

Victor Costa.