Zero-trust 📚

Part 2 of my Boundary Kubernetes lab: replace static passwords with Vault-issued dynamic MySQL users and short-lived SSH certificates per session.

I deployed HCP Boundary Essentials on a local Minikube cluster to broker zero-trust access to a MySQL database and an SSH target — no direct exposure, credential injection, and full session control via the Boundary CLI or Boundary Desktop. Here is the full architecture, configuration, and what I learned.