| ID | product.platform.secrets_manager |
|---|---|
| Description | Issues and rotates device certificates and service secrets. |
| Key | secrets_manager |
| Type | microservice:service |
| Team | Platform Engineering |
| Owner | platform@iotgateway.example |
| Status | active |
| Technologies | Go, HashiCorp Vault, PKI/x509 |
| Attributes | cipher: AES-256-GCM, rotation: 90d |
| Tags |
Table of contents
Guide
Secrets Manager
The Secrets Manager is the platform’s trust anchor. It signs device certificates, stores and leases service secrets, and rotates both on a schedule — all behind a single API so no service ever ships a private key in its config.
Responsibility in one sentence
Be the only place credentials are minted, stored and rotated — and expose that as a narrow, auditable API.