Platform & DevOps·Pipelines, promotion and GitOps
nobody has credentials to deploy; an agent in the cluster watches a repository and makes reality match it.
GitOps
Also calledgit-driven deployment, declarative delivery
Operating a system by keeping its desired state in version control and having an in-cluster agent continuously reconcile the running system to it. It gives you review, history, rollback by revert and drift correction for free, because they are properties of git and of reconciliation rather than features anyone built. It also relocates the hard problems: secrets cannot go in the repository, and a broken commit is now deployed continuously rather than once.