A county database password must be supplied to Pods as mounted files rather than plain ConfigMap data. Which Kubernetes object type is intended for that confidential material?
Select an answer to reveal the explanation.
Short Explanation
Treat passwords like sealed envelopes, not sticky notes on the fridge. Secrets are the envelope object—still base64 in etcd by default, but the right type versus a ConfigMap.
Full Explanation
Secrets are the Kubernetes API objects intended for sensitive credentials and similar data, often mounted as files or injected as env vars. They are base64-encoded at rest in etcd by default unless additional encryption is configured. LimitRange, ResourceQuota, and PodDisruptionBudget address resources and disruptions, not credential storage.