Your teammate has deployed a microservice named myapp1 to a Kubernetes cluster using a YAML specification. Part of the YAML is shown below:

apiVersion: apps/v1
spec:
  containers:
  - name: main-container
    image: noonclub.io/company-repo/myapp1:1.7
    env:
    - name: DB_PASSWORD
      value: "tough0password1"
    ports:
    - containerPort: 8080

apiVersion: apps/v1
spec:
  containers:
  - name: main-container
    image: noonclub.io/company-repo/myapp1:1.7
    env:
    - name: DB_PASSWORD
      value: "tough0password1"
    ports:
    - containerPort: 8080

Upon review, you noticed the database password is stored in plain text within the YAML file. What security best practice should you recommend to your teammate?_