KSKaustav Sarkarinblogs.kaustavsarkar.dev·5d ago · 13 min readSigning Mesh Tokens with VaultThis blog is a part of the Zero-Trust Security on Istio Series, if you haven't read the previous article, please do, it will provide better context. The previous post traced one request's identity flo00
KSKaustav Sarkarinblogs.kaustavsarkar.dev·Jul 6 · 15 min readThe Identity Flow: From Gateway to DatabaseThis blog is a part of the Zero-Trust Security on Istio Series, if you haven't read the previous article, please do, it will provide better context. The previous post laid out the five security layers22M
AKAmir Kolahiinamirkolahi.ir·Jun 30 · 13 min readHashiCorp Vault — Learning GuideA hands-on walkthrough of HashiCorp Vault covering secrets management, dynamic database credentials, and Kubernetes authentication. Table of Contents What is Vault? Phase 1 — Running Vault with Doc10
KSKaustav Sarkarinblogs.kaustavsarkar.dev·Jun 9 · 14 min readService Mesh Zero-Trust ArchitectureZero-trust is a property that emerges when several independent checks each verify a request on their own, without assuming the layers around them already did the work. It often gets described as a pro20
SASagar Aulakhinbrodevops.hashnode.dev·May 8 · 12 min readHow We Built a Centralized Secrets Management System on AWS EKS Using HashiCorp VaultOne Vault cluster. Multiple teams. Zero secrets in Git. Here is the complete setup, flow, and onboarding guide. Why We Built This Every growing engineering team hits the same wall. Secrets start in 00
WAWill Arroyoinwarroyo.hashnode.dev·May 5 · 8 min readSecure Kubernetes Secrets on VCF with External Secrets Operator and Secret Store ServiceIf you haven't heard of the VCF Secret Store Service I highly recommend taking a look. This is a supervisor service that behind the scenes deploys OpenBao. however it's not just deploying OpenBao, it 20
VvictorstackAIinvictorstackai.hashnode.dev·Mar 11 · 5 min readVault Sprawl Risk Patterns and a Secrets Governance Model for Multi-Team CI/CDimport Tabs from '@theme/Tabs'; import TabItem from '@theme/TabItem'; Vault sprawl in multi-team CI/CD is usually a governance failure, not a tooling failure. The practical model that works is: short-lived identity-based access (OIDC/workload identit...00
CAChris Adkininagentops.hashnode.dev·Mar 9 · 51 min readVibe Coding Terraform Configs The Hard WayUsing Claude Code to write Terraform config for a production GKE + Consul + HCP Vault stack turned out to be quite the adventure. This post is a follow-up to Taming Rogue Agents: Defeating ASI03 with 00
CAChris Adkininagentops.hashnode.dev·Feb 21 · 13 min readTaming Rogue Agents: Defeating ASI03 with SPIFFE Identity FederationThis post follows on from the previous post in the series: Taming Rogue Agents: Defeating ASI03 with Vault Dynamic Secrets. The Foundation: Mitigating ASI03 The previous post in this series demonstrat00
TITech Insights Hubintopperblog.hashnode.dev·Feb 12 · 9 min readSecret Management: Vault IntegrationWhy Traditional Secret Management Fails at Scale Environment variables and encrypted configuration files worked adequately when applications were monolithic and deployment frequency was measured in weeks. In 2025, organizations deploy hundreds of tim...00
