Secret Security

Difficulty: Advanced

Question

Are Kubernetes Secrets secure by default?

Answer

No. By default, they are stored as unencrypted base64 in etcd. You must enable 'Encryption at Rest' in etcd or use external tools like HashiCorp Vault.

Concepts covered

Encryption, Vault, Etcd