thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

DevOps & Automation · Foundational

Kubernetes Secret

A Kubernetes object for storing small amounts of sensitive data such as passwords, tokens, and TLS keys.

Definition

Secret values are base64-encoded, not encrypted, by default; enable encryption at rest in etcd and restrict access with RBAC. External secret stores can sync via the Secrets Store CSI Driver or External Secrets Operator.

Example

kubectl create secret generic db --from-literal=password=S3cr3t

Exam tip

Base64 is encoding, not encryption. Enable EncryptionConfiguration for etcd.

Related terms