Secret (Kubernetes)
API object storing base64-encoded confidential credentials, certificates, or keys separately from image code.
Mechanism & Definition
An API resource designed for storing sensitive data such as passwords, OAuth tokens, and TLS certificates. Stored base64-encoded (or encrypted at rest in etcd), Secrets are mounted into Pod containers via tmpfs volume mounts to avoid disk persistence.