What it does
Keeps every credential and certificate in one locked store. It rotates them, pushes them to the machines that need them, renews public certificates, issues internal ones, and installs trust into each new container as it starts, and it never shows a secret's value to anyone.
For a security lead.
Roles it serves
The Contractor PassFor a team that wants outside or automated contributors without handing over the keys.The Branch Office EngineerFor a lead with machines in other offices and rented data centres.The Security OfficerFor a security lead.
Works alongside
The specialists it shares the most crews with.