No More Hardcoded Secrets: Automatic Database Credential Rotation with Vault, AKS and Postgres
In Part 1 of this series, we set up HashiCorp Vault in an AKS cluster using Terraform, configured ExternalSecrets, and demonstrated how to fetch secrets from Vault's KV engine into Kubernetes. Now, let's take it a step further. Static credentials are risky—they can be leaked, misused, or forgotten.

In Part 1 of this series, we set up HashiCorp Vault in an AKS cluster using Terraform, configured ExternalSecrets, and demonstrated how to fetch secrets from Vault's KV engine into Kubernetes.
Now, let's take it a step further. Static credentials are risky—they can be leaked, misused, or forgotten.