This is exactly how Ansible-vault works. It's many times better than committing ...

Too on Oct 15, 2022 | parent | context | favorite | on: Toyota suffered a data breach by accidentally expo...

This is exactly how Ansible-vault works. It's many times better than committing them plain, but I'd still vote for some external service providing the secrets runtime only.