title: How do I store and retrieve signing credentials for IdentityServer4 deployed to Kubernetes?
body: <p>I'm in the process of implementing IdentityServer4 into my ASP.NET Core web application, which will be deployed to a Kubernetes cluster using Continuous Deployment.</p>
  
  <p>The documentation talks about adding signing credentials (<code>AddSigningCredential</code>) and most tutorials/guides demonstrate how to use this by loading a <code>.pfx</code> file from the file system, or by using the local certificate store and searching by the subject name.</p>
  
  <p>Is there a commonly accepted way of storing, retrieving and rotating the signing credentials when deployed to a Kubernetes cluster with minimal intervention?</p>