Summary
This chapter walked through multiple aspects of secrets management. We began by discussing the difference between secret data and more generic configuration data. Why Kubernetes stores and represents Secret objects as base64 encoded text, and why you shouldn’t store secret data in git. There was a discussion on thread modelling secret data in Kuberentes clusters. Next, we then walked through various ways to store and manage secret data including Secret objects, external vaults, Sealed Secrets, and hybrid approaches. Finally, we walked through integrating your secrets into your workloads via volume mounts, environment variables, and directly with APIs.
In the next chapter, we are going to begin focussing on multi-tenancy with virtual clusters.
