My CICD setup is to leverage GitHub workflows fed by secrets and vars from my springcloudconfig server.
I am sharing secrets and vars between:
* Different GitHub repositories (Infra Repo vs App Repo)
* Build time settings and runtime settings.
I've created template-able GitHub workflows that call pulumi typescript code