Where did teams move after HCP Vault Secrets shut down?
HCP Vault Secrets was shut down a few months ago, and the suggested replacement, HCP Vault Dedicated, works quite differently. Many teams originally chose HVS because they didn't…
AWS Secrets Manager
How Are Database Credentials Managed Securely in Production EKS?
I'm learning Kubernetes while building a three-tier application with a React frontend, Node.js backend, and Amazon RDS. I understand that ConfigMaps are for non-sensitive configuration and Kubernetes Secrets…
How Are Database Credentials Managed Securely in Production EKS?
I'm learning Kubernetes while building a three-tier application with a React frontend, Node.js backend, and Amazon RDS database. I understand that ConfigMaps are for non-sensitive settings and Kubernetes…
What’s the cleanest way to manage RDS and DocumentDB users with Terraform?
We have a team of about 10 developers, and Terraform manages our infrastructure. The only exception is Pulumi, which connects through a bastion host to create users in…
What’s the cleanest way to manage RDS and DocumentDB users with Terraform?
We have a team of about 10 developers, and Terraform manages our infrastructure. The one exception is Pulumi, which connects through a bastion host to create users in…
How do you manage third-party API keys when edge functions use OIDC?
OIDC makes a lot of sense for cloud services because edge functions can exchange a runtime identity for short-lived credentials instead of storing permanent AWS access keys in…
Should we use git-crypt for Helm secrets, or switch to AWS-managed secrets?
We run AWS and Kubernetes deployments with plain Helm from Jenkins, without a GitOps tool. Our Helm values.yaml currently contains hardcoded environment-variable secrets and is stored only on…
Should We Encrypt Helm Secrets with git-crypt or Use AWS Secret Management?
We run AWS and Kubernetes with plain Helm installs from Jenkins—there's no GitOps tool involved. Our Helm values.yaml currently contains hardcoded environment-variable secrets and is kept only on…
What’s the best way to connect EKS workloads to an Amazon RDS MySQL database?
I'm learning Amazon EKS and migrating an application from Docker Compose. I'm planning to use Amazon RDS for MySQL and want to understand the recommended production architecture. Should…
What’s the Best Way to Connect EKS Workloads to Amazon RDS?
I'm learning Amazon EKS and migrating an application from Docker Compose. I'm planning to use Amazon RDS for MySQL and want to understand the recommended production architecture. Should…
What's the best way to manage and track secrets created years ago?
I'm curious about how teams effectively manage the lifecycle of their secrets. Recently, we spent quite a bit of time troubleshooting a legacy system that broke due to…