Notes

Where is best placed to put the day 1 secret creations?

Vault needs the initial setup done by hand by an admin in the console. After that it would be nice if we could have a very simple way of tracking the secrets keys we need in order to run vets-app.

Don't have to store the secrets, just know what the keys are are and have a secure way of getting them from the operator to the vault before apps and pipelines start getting deployed.
After that everything just reads vault for secrets.

Design thoughts

In the CI pipeline would it be good if we didn