Using elastic xpack security module, with elasticsearch 7.X, running in a k8s cluster. I am looking for the most "infra as code" solution, with k8s manifests.

After ES has booted, I understand we must setup build-in users passwords with a binary tool: elasticsearch-setup-passwords, how to store generated passwords inside k8s secrets, automatically?

Or even better, is it possible to specify these passwords as ENV vars?