Arsh Singhal’s Post

We pushed to production on a Friday afternoon. Everything looked fine. Until it didn't. The app was running. Requests were coming in. But a third-party integration was silently broken. Three hours of debugging later — Someone had hardcoded a secret key in the config. A key that was rotated that morning. And nobody knew where all the copies lived. Not in one place. Not documented. Just... scattered. In old branches. In a teammate's local file. In a config nobody touched in months. That incident taught me more than any tutorial on secrets management ever could. Because the problem wasn't the rotation. The problem was that we never treated secrets like they deserved to be tracked. We treated them like passwords on sticky notes — just don't look, and hope nothing breaks. After that: One source of truth for every secret. Rotation that didn't require a postmortem to survive. And absolutely no more Friday deploys. The boring stuff — env vars, secrets, config management — is where production actually lives or dies. #SoftwareEngineering #BackendDevelopment #DevOps #EngineeringLessons #TechStories #ProductionIncident #EngineeringLife

To view or add a comment, sign in

Explore content categories