Which resource stores sensitive data such as passwords and keys for pods?

Which resource stores sensitive data such as passwords and keys for pods?

• A. ConfigMap
• B. Service
• C. Secret
• D. PersistentVolume

Answer: (C)

Storing sensitive data like passwords and keys for pods is handled by the Secret resource. Secrets are designed to hold confidential information separately from application code or config data, and pods can access this data by mounting it as files or by importing it as environment variables. This lets you manage secrets centrally and control access with RBAC, without embedding them directly in images or config maps. The data inside a Secret is stored in a base64-encoded form in the API object, which is not encryption by default, so it’s important to enable encryption at rest and apply proper access controls for real security. ConfigMaps, by contrast, are for non-sensitive configuration data. Services provide networking access to pods, not sensitive data storage. PersistentVolumes are for durable storage of arbitrary data, not for storing passwords or keys.

Storing sensitive data like passwords and keys for pods is handled by the Secret resource. Secrets are designed to hold confidential information separately from application code or config data, and pods can access this data by mounting it as files or by importing it as environment variables. This lets you manage secrets centrally and control access with RBAC, without embedding them directly in images or config maps.

The data inside a Secret is stored in a base64-encoded form in the API object, which is not encryption by default, so it’s important to enable encryption at rest and apply proper access controls for real security.

ConfigMaps, by contrast, are for non-sensitive configuration data. Services provide networking access to pods, not sensitive data storage. PersistentVolumes are for durable storage of arbitrary data, not for storing passwords or keys.