We can read for a secret, or config-map or simply just ENV Vars - right ?

I'd vote for ENV vars, as that is not specific to k8s/openshift