ConfigMaps vs Secrets
What is true about a Kubernetes Secret by default?
Choose one answer
Its values are base64-encoded, not encrypted; protection comes from RBAC and optionally encryption at rest in etcd.
Its data is strongly encrypted with a per-cluster key everywhere it is stored.
Secrets are automatically rotated every 24 hours.
Secrets can only be mounted as files, never as environment variables.