Kubernetes Secret

Problem

Your container needs a database credential. Putting it directly into the container image means anyone obtaining the image may obtain the credential.

Solution — Kubernetes Secret

Kubernetes provides a dedicated object for sensitive workload values that can be supplied to pods with controlled access.

Core idea: Kubernetes Secrets separate sensitive configuration from application images, though they still require proper cluster security and often integration with external secret stores.