I would like to have dependent installations in a bundle dependency graph to be able to "reuse" a credential or parameter set referenced by the root bundle. So if the myenv installation has a credential set named "all the stuff" and one of its credentials is passed through the graph to mydb, then mydb should be able to reference the "all the stuff" credential set and when it's resolved before the bundle is run, we only resolve the credentials used by that bundle. This helps us avoid resolving the entire credential set, reducing external API calls and accessing sensitive data that wasn't needed.

We'll need to update our functions that resolve parameters and credential sets (value sets) to accept a list of keys to resolve and update all existing code paths to pass in the full set of keys.

Later when dependencies is implemented, we can then pass in a subset of keys that are used by the dependent bundle. So this is essentially a refactoring PR that we can commit against main immediately (and without a feature flag), and we will use it later when we need it to implement PEP003.

ℹ️ Read PEP003 - Advanced Dependencies for context about how dependencies should work, design details, and notes about desired behavior.