Secret [glossary]deterministic

Stores sensitive information, such as passwords, OAuth tokens, and ssh keys.

core-objectsecurity

Stores sensitive information, such as passwords, OAuth tokens, and SSH keys.

Secrets give you more control over how sensitive information is used and reduces the risk of accidental exposure. Secret values are encoded as base64 strings and are stored unencrypted by default, but can be configured to be [encrypted at rest](/docs/tasks/administer-cluster/encrypt-data/#ensure-all-secrets-are-encrypted).

A [Pod](#gloss:pod) can reference the Secret in a variety of ways, such as in a volume mount or as an environment variable. Secrets are designed for confidential data and [ConfigMaps](/docs/tasks/configure-pod-container/configure-pod-configmap/) are designed for non-confidential data.

Sources

reference/glossary/secret.md · doc — “Stores sensitive information, such as passwords, OAuth tokens, and ssh keys.”

Related (16)

references Configure a Pod to Use a Projected Volume for Storage — Secrets conf=1

references Pull an Image from a Private Registry — Secret conf=1

references Encrypting Confidential Data at Rest — Secrets conf=1

references Decrypt Confidential Data that is Already Encrypted at Rest — Secrets conf=1

references Manage TLS Certificates in a Cluster — Secret conf=1

references Managing Secrets using kubectl — Secrets conf=1

defines Good practices for Kubernetes Secrets conf=1

references Volumes — Secret conf=1

references Ingress — secret conf=1

references Static Pods — Secret conf=1

references Pod Lifecycle — Secret conf=1

references Init Containers — Secrets conf=1

references Images — secret conf=1

references Running Kubelet in Standalone Mode — Secret conf=1

references Using RBAC Authorization — secrets conf=1

prerequisite_of Downward API — ai-suggested prerequisite conf=0.7