Never Hardcode PostgreSQL Passwords Again
Welcome to TechTalk With Nathan! 🚀
I help engineers master DevOps, Kubernetes, and SRE (Site Reliability Engineering) through hands-on, production-ready tutorials.
If you are looking to break into a DevOps career or level up your infrastructure skills, this channel breaks down complex cloud topics into clear, actionable guides.
Tired of production incidents due to static database credentials? This video demonstrates how to eliminate them by configuring HashiCorp Vault for ephemeral PostgreSQL credentials. Learn how to achieve 'set-and-forget' secrets management and enhance your data privacy! 🚀
What you will learn here:
00:00 - Intro: Why Static DB Passwords Are Broken
00:45 - How Vault Dynamic Secrets Work
02:15 - Spinning Up PostgreSQL on Kubernetes
04:00 - Configuring Vault Database Secrets Engine
05:30 - Creating the Vault Read-Only Role
07:00 - Inspecting the Setup in the Vault UI
08:15 - Generating Dynamic PostgreSQL Credentials
09:30 - Revoking Credentials & Breaking the Session
10:00 - Next Step: Auto-Unseal Your Vault Cluster