How deeply does Google Anthos in Action cover Kubernetes Secret?

Explains representation and storage risks, but stops short of defining Secret manifests or consumption commands.

Kubernetes Secret

A Kubernetes Secret is a resource for storing data intended to be confidential or sensitive for use by workloads.

A Kubernetes Secret stores external information intended for use by Pods when that information is sensitive. Unlike ConfigMaps, Secret values use Base64 encoding, which supports binary data but does not provide meaningful confidentiality: anyone able to view a Secret can trivially decode it. section 3.2.6

Treat Secret protection as a layered operational concern:

Use an external secret manager such as Vault or Google Secret Manager when stronger protection is required. section 3.2.6
Enable encryption for Secrets stored in etcd, while recognizing that this protects the database value rather than the Secret throughout Kubernetes. section 3.2.6
Combine external protection with etcd encryption to cover both cluster handling and database storage. section 3.2.6

How Google Anthos in Action covers it

liveBook manning.com

Read Google Anthos in Action on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Acing the Certified Kubernetes Administrator Exam, Second EditionA Secret is a Kubernetes API object intended to hold sensitive data such as credentials or tokens.
liveBook manning.com

Road to KubernetesA Kubernetes Secret is a resource for storing sensitive configuration data and exposing it to workloads as keys, environment variables, or volumes.
liveBook manning.com

Kubernetes for DevelopersA Kubernetes Secret is an API object that stores sensitive data such as keys, certificates, and credentials.
liveBook manning.com

Platform Engineering on KubernetesA Kubernetes Secret is a resource for storing sensitive configuration data with access intended to be protected.
liveBook manning.com

Machine Learning Platform EngineeringA Kubernetes Secret is an API object for storing and supplying sensitive data to workloads.

Compare how 6 books explain Kubernetes Secret →

Related concepts

configmapcontrasts with · A ConfigMap is a Kubernetes API resource that stores non-confidential configuration data as key-value pairs for use by workloads and other cluster components.
environment variableuses · An environment variable is a named value supplied through an operating-system or process environment and made available to programs for runtime configuration or information.
Kubernetes resourcekind of · A Kubernetes resource is a persistent API-managed object representing the desired or observed state of a workload, configuration, or other cluster entity.
Hierarchy Controllerused by · Hierarchy Controller is a Kubernetes controller that provides hierarchical namespaces, inheritance, and object replication between parent and child namespaces.
Base64uses · Base64 is a binary-to-text encoding scheme that represents arbitrary bytes using a fixed 64-character alphabet and provides no confidentiality.
Helm chartproduced by · A Helm chart is a versioned package of templated Kubernetes resource definitions, configuration values, and metadata for deploying an application or service.

This explainer was generated by Manning's knowledge graph from the text of Google Anthos in Action. The section links point to the parts of the book it draws on.