🎁 New User? Get 20% off your first purchase with code NEWUSER20 · ⚡ Instant download · 🔒 Secure checkout Register Now →
Menu

Categories

DevOps Intermediate

What is Kubernetes Secret?

A Kubernetes object for storing sensitive data like passwords, tokens, and certificates, with base64 encoding and optional encryption at rest.

Kubernetes Secrets store sensitive information separately from pod definitions and container images. They support types including Opaque (arbitrary data), kubernetes.io/tls (TLS certificates), and kubernetes.io/dockerconfigjson (container registry credentials). Secrets are base64-encoded by default (not encrypted) and can be encrypted at rest with EncryptionConfiguration. They are injected into pods as environment variables or mounted files. Best practices include using external secret managers (HashiCorp Vault, AWS Secrets Manager) with operators like External Secrets, enabling encryption at rest, limiting RBAC access to secrets, and rotating secrets regularly.

Related Terms

GitFlow
A branching model for Git that defines a strict workflow with feature, develop, release, hotfix, and main branches.
Terraform
An open-source tool for provisioning and managing cloud infrastructure using declarative configuration files.
Kubernetes ConfigMap
A Kubernetes object that stores non-sensitive configuration data as key-value pairs, injected into pods as environment variables or files.
GitOps
A practice where Git repositories serve as the single source of truth for both application code and infrastructure configuration.
Artifact Repository
A centralized storage system for build artifacts like compiled binaries, packages, and container images used in CI/CD pipelines.
Environment Variable
A dynamic value stored outside the application code that configures behavior without hardcoding sensitive or environment-specific data.
 View All DevOps Terms →