For a production Kubernetes environment, what secret-management pattern are you using? The main options I'm considering are native Kubernetes Secrets, a Secrets Store CSI Driver, or having applications…
In a production Kubernetes environment, which approach do you generally recommend for storing, accessing, and rotating secrets? The main options I'm considering are native Kubernetes Secrets, the Secrets…
We run services on AWS using RDS, EKS, Redshift, and DocumentDB. Today, Liquibase applies schema changes with shared credentials from Parameter Store, while a Jenkins library creates per-application…
I recently built an IoT platform on Google Kubernetes Engine (GKE) and faced a challenge I didn't anticipate. While scaling the messaging with RabbitMQ was straightforward, managing device…
We currently use HashiCorp Vault Enterprise under a three-year contract, and as we're nearing the end of this term, IBM wants us to run an auditing script to…
Hey everyone! I'm setting up Vault and the Vault operator in my home Kubernetes cluster to manage secrets. I'm curious about the best practices for automating Vault's management,…
I'm currently using **sealed-secrets** for encrypting my secret YAMLs since it meshes well with **ArgoCD** when unsealed in the cluster. Right now, I keep secrets in a private…
I'm setting up HashiCorp Vault in my homelab using the official Helm chart, but I'm trying to design it with production-like standards. I want everything—configurations, scripts, policies, and…