Secret Management¶
Most secrets used in our build process are managed via 1Password. The technique is documented in developer.1password.com.
Pull and Push Secrets¶
Secrets for the TestPlatformPull, TestAcquiaPull, and similar tests are in the test-secrets
vault in the DDEV 1Password instance. They can be rotated and otherwise managed there.
The test-secrets
vault allows access to the service account tests
whose auth token is in “1Password Service Account Auth Token: Tests”