Kubernetes secrets is a mechanism that allows sensitive information to be stored in a central repository called etcd, which is a more secure way to store information than in the pod definition or in a container image itself. However, Kubernetes doesn’t yet have the capabilities to manage the lifecycle of secrets, so sometimes we need external systems to manage this sensitive information.

Read full article on InfoQ