Christian TCH Blog https://tch.guru/blog My personal blog where I share thoughts about cloud and cybersecurity en-us undefined (Christian TCH) undefined (Christian TCH) Wed, 20 May 2026 00:00:00 GMT https://tch.guru/blog/hashicorp-boundary-poc-kubernetes Zero-Trust Database and SSH Access with HCP Boundary on Kubernetes — A Hands-On POC https://tch.guru/blog/hashicorp-boundary-poc-kubernetes I deployed HCP Boundary Essentials on a local Minikube cluster to broker zero-trust access to a MySQL database and an SSH target — no direct exposure, credential injection, and full session control via the Boundary CLI or Boundary Desktop. Here is the full architecture, configuration, and what I learned. Wed, 20 May 2026 00:00:00 GMT undefined (Christian TCH) securitypamhashicorpboundarykubernetesterraformzero-trust https://tch.guru/blog/vault-dynamic-creds-with-boundary-kubernetes From Static Passwords to Dynamic Access: Vault + HCP Boundary on Kubernetes https://tch.guru/blog/vault-dynamic-creds-with-boundary-kubernetes Part 2 of my Boundary Kubernetes lab: replace static passwords with Vault-issued dynamic MySQL users and short-lived SSH certificates per session. Mon, 15 Jun 2026 00:00:00 GMT undefined (Christian TCH) securityhashicorpboundaryvaultkubernetesterraformzero-trust