Find a better solution for secret management

[berekuk]

Right now we use 1Password through Terraform and provision secrets in K8S.

We could try either 1Password Kubernetes integrations, or External Secrets, or Hashicorp Vault.