secrets-vault-manager

原文涵盖的主题

• Secrets Vault Manager
• Overview
• When to Use
• HashiCorp Vault Patterns
• Architecture Decisions
• Auth Methods
• Secret Engines
• Policy Design

Tier: POWERFUL Category: Engineering Domain: Security / Infrastructure / DevOps -- Production secret infrastructure management for teams running HashiCorp Vault, cloud-native secret stores, or hybrid architectures. This skill covers policy authoring, auth method configuration, automated rotation, dynamic secrets, audit logging, and incident response. Distinct from env-secrets-manager which handles local .env file hygiene and leak detection. This skill operates at the infrastructure layer — Vault clusters, cloud KMS, certificate authorities, and CI/CD secret injection. Standing up a new Vault cluster or migrating to a managed secret store Designing auth methods for services, CI runners, and human operators Implementing automated credential rotation (database, API keys, certificates) Auditing secret access patterns for compliance (SOC 2, ISO 27001, HIPAA) Responding to a secret leak that requires mass revocation Integrating secrets into Kubernetes workloads or CI/CD pipelines -- | Decision | Recommendation | Rationale | |----------|---------------|-----------| | Deployment mode | HA with Raft storage | No external dependency, built-in leader election | | Auto-unseal | Cloud KMS (AWS

这里只展示节选，请以完整原文和当前要求为准。