Secrets
Secret, sensitive, DATA, (database, passwords, API, tokens, TLS, certificates) ko, STORE, karta hai — DATA, base64-encoded, hota hai, (encryption, NAHI, — sirf, ENCODING) aur, etcd, mein, (agar, ENCRYPTION, AT, REST, ENABLE, hai) ENCRYPTED, STORE, ho, sakta hai.
Secrets, ko, bhi, ConfigMaps, ki, TARAH, hi, environment, variables, YA, mounted, volumes, ki, TARAH, containers, mein, INJECT, kiya, ja, sakta hai — LEKIN, Kubernetes, EXTRA, PRECAUTIONS, LETA, hai, (jaise, sirf, MEMORY, mein, STORE, karna, disk, PAR, NAHI).
apiVersion: v1
kind: Secret
metadata:
name: db-secret
type: Opaque
data:
password: c2VjcmV0MTIz # base64 encoded
kubectl create secret generic db-secret --from-literal=password=secret123- Secret = sensitive data (passwords, tokens), base64-encoded
- Environment variables ya mounted volumes ki tarah inject hoti hai
- base64 encoding hai, encryption nahi — RBAC + encryption at rest zaroori
Kubernetes, mein, DIFFERENT, Secret, types, hote, HAIN: "Opaque" (generic, key-value), "kubernetes.io/tls" (TLS, certificates), aur, "kubernetes.io/dockerconfigjson" (private, registry, credentials).
kubectl create secret docker-registry my-registry-secret \
--docker-server=myregistry.com --docker-username=user --docker-password=passProduction, environments, mein, OFTEN, EXTERNAL, secret, managers, (jaise, HashiCorp, Vault, AWS, Secrets, Manager) use, kiye, jaate, HAIN, — tools, jaise, "External, Secrets, Operator" INHE, Kubernetes, Secrets, ke, saath, SYNC, karte, HAIN.