# Kubernetes secrets Published articles for Kubernetes secrets. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Managing Environment Variables and Secrets in DevOps DevFeed: [Managing Environment Variables and Secrets in DevOps]() Original publisher: [Read original article]() Author: Pramodh Kumar M Published: 2026-08-01T13:00:47Z Content type: tutorial Language: en Sources: [Kubernetes - KodeKloud Blog | DevOps, Cloud, Kubernetes, AI Tutorials & More]() Topics: [DevOps](), [configuration](), [GitGuardian](), [GitHub](), [Terraform](), [Kubernetes]() Tags: [ci-cd-secrets-management](), [cloud](), [collaboration](), [collaboration-tools](), [configuration](), [container](), [crash](), [devops](), [devsecops](), [dynamic-secrets](), [env-file-security](), [environment-variables](), [gitguardian](), [github](), [hardcoded-credentials](), [hashicorp-vault](), [jira](), [kubernetes](), [kubernetes-secrets](), [leak](), [managing-environment-variables-and-secrets](), [rotation](), [safety](), [sealed-secrets](), [secret-rotation](), [secret-scanning](), [secrets](), [secrets-management-best-practices](), [security](), [storage](), [terraform](), [vault]() ### AI overview A guide to managing environment variables and secrets in DevOps. It explains how secrets escape through repositories, processes, crash reports, containers, collaboration tools, Kubernetes Secrets, and Terraform state, and discusses storage, access controls, lifecycles, and rotation. ### Source excerpt Nearly 29 million secrets were pushed to public GitHub in a single year, and most teams still discover their own leaks by accident. Here is how environment variables actually escape, and what to use instead at each stage. ## Kubernetes Secrets and ConfigMaps in 2026: the Secret is the last mile " Giant Swarm DevFeed: [Kubernetes Secrets and ConfigMaps in 2026: the Secret is the last mile " Giant Swarm]() Original publisher: [Read original article]() Author: Puja Abbassi Published: 2026-06-29T10:31:16Z Content type: tutorial Language: en Sources: [Giant Swarm Blog]() Topics: [Kubernetes](), [configuration](), [Containers]() Tags: [configuration](), [containers](), [dev](), [kubernetes](), [kubernetes-secrets](), [platform-engineering](), [secrets](), [tech]() ### AI overview This tutorial revisits Kubernetes Secrets and ConfigMaps and explains how their role fits into a longer production pipeline in 2026. It covers their purpose, scope, delivery methods, size and update behavior, including the need to restart workloads after Secret changes. ### Source excerpt Part IV of the Understanding Basic Kubernetes Concepts series, updated from the 2016 original. ## Join Teleport at KubeCon + CloudNativeCon Europe 2024 DevFeed: [Join Teleport at KubeCon + CloudNativeCon Europe 2024]() Original publisher: [Read original article]() Author: david.sudia@goteleport.com (Dave Sudia) Published: 2024-03-13T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [Security](), [Zero Trust](), [Cloud](), [Kubernetes](), [Single sign-on (SSO)]() Tags: [cloud-native](), [compliance](), [identity](), [kubecon-eu](), [kubernetes](), [kubernetes-secrets](), [policy](), [security]() ### AI overview Teleport's KubeCon + CloudNativeCon Europe 2024 message presents a Zero Trust platform for unified identity, access, and policy management across Cloud Native infrastructure. The article highlights single-login access, short-lived privileges, Just-in-Time Access, and the rollout of Workload Identity. ### Source excerpt Come find out how Teleport provides security for Cloud Native technologies. ## The Birth of the External Secrets Community DevFeed: [The Birth of the External Secrets Community]() Original publisher: [Read original article]() Author: Lucas Severo Alves Published: 2021-05-06T07:12:38Z Content type: article Language: en Sources: [Blog - Container Solutions]() Topics: [Kubernetes](), [Maintainers](), [JavaScript]() Tags: [azure](), [google-cloud](), [hashicorp-vault](), [ibm](), [javascript](), [kubernetes](), [kubernetes-secrets](), [open-source](), [secret-rotation](), [security]() ### AI overview This article describes the growth of projects that synchronize secrets from external providers into Kubernetes and the formation of a community around the External Secrets Operator. It highlights GoDaddy's kubernetes-external-secrets project, its provider integrations and active maintenance, while noting that it was developed in JavaScript. ### Source excerpt Managing secrets in Kubernetes can be a cumbersome job. In a multi-service multi-environment setup, you can end up with hundreds of secrets without even noticing. It is hard to keep track of everything and at the same time manage secret rotation, onboard new services, and onboard new people with correct access permissions. ## What's Coming To Keycloak DevFeed: [What's Coming To Keycloak]() Original publisher: [Read original article]() Author: Stian Thorgersen Published: 2019-09-03T00:00:00Z Content type: opinion Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [account](), [React](), [WebAuthn](), [Kubernetes](), [Operator Lifecycle Manager](), [API](), [Encryption](), [LDAP](), [health checks](), [Testing]() Tags: [account](), [api](), [authentication](), [automated](), [console](), [encryption](), [health-checks](), [idm](), [kerberos](), [keycloak](), [kubernetes](), [kubernetes-secrets](), [ldap](), [openid-connect](), [operator](), [password](), [rest-api](), [saml](), [software](), [sso](), [usability](), [user-experience](), [vault]() ### AI overview Keycloak's 2019 roadmap outlines planned work on a new React-based account console, WebAuthn authentication, a Kubernetes operator, external vault integration, user profiles, metrics and health checks, and improved automated testing and builds. ### Source excerpt New Account Console and Account REST API The current account console is getting dated. It is also having issues around usability and being hard to extend. For this reason we had the UXD team at Red Hat develop wireframes for a new account console. The new console is being implemented with React.js providing a better user experience as well as making it easier to extend and customise. JIRA - Account Console JIRA - Account REST API WebAuthn We are working towards adding WebAuthn support both for two factor authentication and passwordless experience. This task is not as simple as adding an authenticator for WebAuth, but will also require work on improving authentication flows and the account console. Design proposal - Authentication flow improvements Design proposal - WebAuthn Authenticator Design proposal - WebAuthn Two factor JIRA - Two factor JIRA - Passwordless Operator Operators are becoming an important way to manage software running on Kubernetes and we are working on an operator for Keycloak. The aim is to have an operator published on OperatorHub.io soon which provides basic install and seamless upgrade capabilities. This will be based on the awesome work done by the Red Hat Integreatly team. JIRA Integreatly Keycloak Operator Vault At the moment to keep credentials such as LDAP bind credentials more secure it is required to encrypt the whole database. This can be complex and can also have a performance overhead. We are working towards enabling loading credentials, such as LDAP bind credential and SMTP password, from an external vault. We're providing a built-in integration with Kubernetes secrets as well as an SPI allowing integrating with any vault provider. In the future we will also provide the option to encrypt other more dynamic credentials at rest in the database. JIRA - Vault JIRA - Encryption at rest User Profile Currently there's no single place to define user profiles for a realm. To resolve this we are planning to introduce the Profile SPI, which w