Secrets in automation and CI/CD: one source, short-lived credentials, no values in Git
Passwords in playbooks, tokens in pipeline variables, Secrets created by hand in the cluster. How a small team can move secrets into one source and deliver them to consumers without storing values in the repository.