Generating fake data for CI?

[lollipopman]

We currently use a git repo to store our secret data. For running tests in CI we have a repo which mirrors the secret repos structure, but is populated with fake data. I would like to do something similar with our in design OpenBao installation.

My current thought is:

1. Store every secret in OpenBao with metadata which describes the type of the secret using some type of schema, for instance the schema might specify a TLS Key or a 12 character ASCII password
2. On some cadence walk all the keys and use their associated metadata to generate fake data
3. Use the fake data to provide a test OpenBao instance to CI

I would love to hear if folks have devised other solutions, or if they have any feedback on my hand wavy design.