Docker and CI/CD · Middle · Question 65 of 75

Are Kubernetes Secrets encrypted by default?

✓Correct answer: Not necessarily; they're base64-encoded unless encryption is set
2Yes, they are hashed so nobody can read them back
3Yes, always with a key that only the pod itself can read

Explanation

Base64 is an encoding, not encryption. Enable encryption at rest, restrict access with RBAC, or use an external secrets manager.

Further reading

Kubernetes: Secrets ↗

Test yourself

Take the Docker and CI/CD · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.