[Rd6n6]

Your production servers end up needing a variety of secrets, whether db passwords, encryption keys, access tokens, or whatever else. You want to be able to set these automatically, but don’t want to hard code any of it or have it appear in your git repo. Sometimes you have to rotate credentials too. There are a lot of ways to get this wrong and leak your credentials, or have a server/service fail to get the correct one. What do you do?

It’s just not always clear how best to do this for a given project. A secrets manager is just a program designed and marketed to help make this easier. It would be weird if there weren’t software trying to help with something like this

It may or may not work for you. It’s like chef vs bash scripts: I prefer bash scripts, but many teams enjoy using chef