A TLS private key must appear as files inside the container with restricted permissions rather than being baked into the image. What should the developer do?
Select an answer to reveal the explanation.
Short Explanation
Treat keys like hotel key cards issued at check-in—not printed inside the souvenir mug (the image). Mount a Secret volume and the files show up in the room with tight permissions.
Full Explanation
Secret volumes expose sensitive material as files in the container, commonly with restricted default modes, without baking secrets into images. ConfigMaps are not appropriate for private keys. Distributing secrets via NodePort or image layers increases leakage risk and operational pain when rotating credentials.