Introduction to Secrets

Introduction to Secrets

Secrets store sensitive data like passwords, tokens, and keys. Unlike ConfigMaps, Secrets are base64-encoded and can be encrypted at rest.

Secret Types

• Opaque: Generic secret (default)
• kubernetes.io/service-account-token: Service account tokens
• kubernetes.io/dockerconfigjson: Docker registry credentials
• kubernetes.io/tls: TLS certificates
• kubernetes.io/basic-auth: Basic authentication

Creating Secrets

Secret Manifest

Using stringData (plain text)

Base64 Encoding