+1 for Vault, where I work we are in the process of switching to it. Automatic password rotation for AD credentials[1] is especially useful to us. Meanwhile w

+1 for Vault, where I work we are in the process of switching to it. Automatic password rotation for AD credentials[1] is especially useful to us. Meanwhile we use the project level variables Gitlab API[2] Secrets are kept in Gitlab and requested by applications through a token that can easily be revoked [1] https://www.vaultproject.io/docs/secrets/ad#password-rotation https://www.vaultproject.io/docs/secrets/ad#password-rotatio... [2] https://docs.gitlab.com/ee/api/project_level_variables.html https://docs.gitlab.com/ee/api/project_level_variables.html