[threeseed]

But it can be a secret. You can store Base64-encoded, encrypted data.

And you can encode it for example using an external KMS.

[gscho]

Yes I understand that. My point is until you configure it in that way it is not “secret” and the name of the object is a bit misleading, especially when first learning k8s.

[rdtsc]

Is that built-in though? Because if it isn’t then it is a bit silly to call it a secret.