Best practices for managing and storing secrets like API keys and credentials
the current solutions for secrets management just seem to pass the buck, this problem is far from solved. Where you going to store your secrets that spin up your k8s environment? It eventually comes down to protecting your PGP key I think. Where do you store the secret for your admin account to AWS? Or to your domain name provider? Or bank account? 1password?I suppose once your core infrastructure is up you just generate random passwords and store them in k8s for access when bringing up your infrastructure.