I am finally trying to move away from plain instances

Question

I am finally trying to move away from plain instances

managed with ansible to k8s.

So, Far I have cert manager+nginx ingress+auto scaling configured.

I want to load secrets into pod env from hashicorp vault but their sidecar and the new secretprovider implementations only let me mount the variables to a fs path in the pod.. I am not sure whats the best way to do this.

Everyone here is used to ssh'ing in the machine to check logs, change env variables and debug in prod(even though we have a staging env) so I want a centralized logging infrastructure. I am not sure what to pick here? The most popular option appears to be elk stack but I am not interested in processing those logs for now.. I just want to see them all in 1 place.

Monitoring is a somewhat solved problem with prometheus/grafana