What’s the Best Way to Manage Secrets in Different Environments?

Just a quick note—secrets should never cross the boundary between production and non-production environments. In fact, it's best to treat any platform services running in non-prod as if they were in production, but applications shouldn’t mix those two worlds.

I really believe standardizing on a single vault is essential. It helps avoid confusion and makes managing secrets much easier for everyone. Plus, having consistent tooling that everyone can use is a game changer.

I think it’s important to allow teams some choice in which tool they prefer, as long as they're fully responsible for managing it. It can lead to accountability and better alignment with their specific needs.