Kubernetes FAQ, question 5 of 15

How should secrets be handled in Kubernetes?

Prefer external secret stores for sensitive credentials, encrypt etcd at rest, restrict Secret access, never bake secrets into images.

Answered by Zerox Innovation. Last reviewed .

Need more than an answer?

Zerox Innovation helps teams choose, deploy and run the platforms covered here, from a first Nessus scan to a hardened Kubernetes cluster.