Docker and CI/CD · Senior · Question 48 of 75
How are secrets usually handled in a GitOps repository?
- ✓Correct answer: Encrypted (SOPS, Sealed Secrets) or referenced from a vault
- 2Kept out of Git and typed in by hand on each deploy
- 3Stored in plain text in a private repository
Explanation
Everything else is declared in Git, so secrets need encryption or an external store reference. Only the cluster's controller can decrypt or fetch them.