Kubernetes Secret
The API object for sensitive data, consumed like a ConfigMap via env vars or volumes, but access-controlled separately and only base64-encoded by default — real protection requires etcd encryption at rest and tight RBAC. External secret stores are typically synced in rather than committed to manifests.
This Concept is waiting for its first lesson!
The API object for sensitive data, consumed like a ConfigMap via env vars or volumes, but access-controlled separately and only base64-encoded by default — real protection requires etcd encryption at rest and tight RBAC. External secret stores are typically synced in rather than committed to manifests.
Are you a teacher? Sign in to start contributing.
Sign In