Glossary / Kubernetes

Secret

A Secret stores sensitive data (passwords, tokens, keys) the same way a ConfigMap stores config. By default its contents are only base64-encoded, not encrypted, in etcd — encryption-at-rest or an external secrets manager is needed for real protection.