Permission based secret promotion between environments

As IT Operations for a Healthcare Laboratory we have two secret managers one for the Production environment and another for our Dev-Unstable, Dev, and Integration environments. We would like to simplify this down to one secrets manager. but we need to control who can promote a secret from one environment to another.

we have our Developers, Software Quality Assurance, IT System Operators groups that ensure that our project deliverables meet the highest standards of patient care.

Conditions of Acceptance:

  • Developers Can Create/Read/Update/Delete secrets for the Dev-Unstable, Dev Environments.
  • Developers Can Promote a secret from Dev-Unstable to Dev Environments.
  • Developers Can Read secrets for the Integration and Production Environments.
  • Software Quality Assurance Can Read secrets for the Dev-Unstable, Dev, and Production Environments.
  • Software Quality Assurance Can Promote secrets for the Integration Environment from the Dev Environment.
  • Software Quality Assurance Can Create/Read/Update/Delete secrets for the Integration Environment.
  • IT System Operators Can Read secrets for the Dev-Unstable, Dev, and Integration Environments.
  • IT System Operators Can Promote secrets for the Production Environment from the Integration Environment.
  • IT System Operators Can Create/Read/Update/Delete secrets for the Production Environment.