A source of truth is one authoritative location for a given set of values or facts. For secure values, pipelines, deployment events, cluster services, and other automation should retrieve secrets from that location. section 6.2.2
Centralizing secrets reduces conflicting copies and opportunities for error while simplifying credential rotation and sustaining secure configuration. Scattering values across pipeline steps, deployments, and services creates brittle operational practices. section 6.2.2
Pipeline secret retrieval
A pipeline can inject environment variables or render a Terraform configuration from the authoritative secrets store instead of embedding credentials in pipeline or application configuration. section 6.2.2
Figure 6.5 We are using the same tools we will integrate with the platform for our customers’ use. To create the truly self-service experience we want, beyond the general criteria, we need these from our secrets management tool.
Use the secrets-management criteria to evaluate whether the chosen tool supports a self-service experience and authoritative secret retrieval. section 6.2.2
