Managing secrets with Kubernetes

Before granting our service account super powers using RBAC, let's review how Kubernetes manages secrets. Kubernetes stores secrets in etcd (https://coreos.com/etcd/) by default. There are different types of secret Kubernetes can manage. Let's look at the various secret types and then create our own secrets and pass them to containers. Finally, we'll build a secure pod together.

Understanding the three types of Kubernetes secret

There are three distinct types of secret:

• Service account API token (credentials for talking to the API server)
• Registry secret (credentials for pulling images from private registries)
• Opaque secret (your secrets that Kubernetes knows nothing about...