Document Vault Structure about documentation HOT 2 OPEN

Use as less key-value pairs per secret as possible (it's not possible to update only single key-value pairs)

There is vault kv patch that can do that.

from documentation.

So far, we assumed secretes to be defined on the cluster level. However, some secrets might be better put on the level of a tenant and shared between all clusters of that tenant.

Would it also makes sens to have globally defined secretes? Maybe but this certainly needs security considerations.

from documentation.