#secrets articles

Kubernetes ConfigMaps and Secrets in 2026: Configuration Without Rebuilding Images

TL;DR: ConfigMaps hold non-sensitive configuration (feature flags, endpoints, tuning values); Secrets hold sensitive values (passwords, tokens, keys) — with one warning that must be said out loud: a K

devopsenginer.hashnode.dev

Powerduck3d ago · 3 min read

The agent renamed the environment variable in code, but CI still held the old secret name

The agent was asked to clean up a cryptic legacy token name. It renamed the variable in source code, updated every read it could locate, removed the old spelling from comments, ran the app locally, sa

blogs.powerduck.com

Powerduck4d ago · 2 min read

The agent added debug logging and wrote the Authorization header to plaintext logs

A downstream call kept failing, so the agent added a log line that printed the outgoing request to make it traceable. The intent was reasonable: see the method, path, and headers on a retry. The imple

1 blogs.powerduck.com

Manoj NaikOct 19 · 3 min read

Kubernetes ConfigMaps and Secrets: A Practical Hands-On Guide

Introduction Why Kubernetes applications should not keep configuration inside container images ConfigMap vs Secret ConfigMap Create from YAML Create using kubectl Read values as environment variables

cloudopschronicle.hashnode.dev

Doug NiccumOct 13 · 12 min read

Angular where to store API keys: frontend vs backend

Nowhere in your Angular bundle. Anything shipped to the browser is public, so store only publishable keys client-side and keep secret keys on your backend behind a proxy or BFF, injected at build or r

blog.dniccumdesign.com

Rohit TewariSep 29 · 5 min read

How to use AWS Secret Manager in Angular using AWS CLI

Introduction ‍AWS Secrets Manager is a secrets management service provided by Amazon Web Services (AWS). With the AWS Secrets Manager, you can manage, store, and rotate secrets, so you can follow best

rohittewari.hashnode.dev

Akshay NazirkarSep 20 · 8 min read

What Is Secret Manager in GCP?

Introduction Applications often need sensitive information to work. A backend service may need a database password to connect to Cloud SQL. An application may require an API key to communicate with an

akshay25.hashnode.dev

akramAug 23 · 13 min read

A Securing Secrets Security Framework for IT Leaders

A securing secrets security framework is the set of policies, tools, and operational controls a business uses to store, access, rotate, monitor, and retire passwords, API keys, certificates, tokens, a

3 esparksit.hashnode.dev

Doug NiccumJun 25 · 8 min read

We kept leaking .env files across environments—here’s how I solved it

A quick story Last year when I onboarded a new developer on the team I was managing, I quickly ran into a couple issues with the onboarding process. First, I realized our documentation was pretty bad

blog.dniccumdesign.com

Kaustav SarkarJun 9 · 14 min read

Service Mesh Zero-Trust Architecture

Zero-trust is a property that emerges when several independent checks each verify a request on their own, without assuming the layers around them already did the work. It often gets described as a pro

blogs.kaustavsarkar.dev

Search Hashnode

Trending tags this week