Secrets and region
ESO, deployment region, and operational constraints.
Production deploys via platform-eks-production Helm charts. Application secrets (database, Stripe, Authentik, OpenFGA) sync from AWS Secrets Manager through External Secrets Operator.
Do not run production workloads outside eu-west-1 for this product; data residency assumptions depend on that region.