☁️ Free practice test question from: KCNA (KCNA)

Base64 Encoding vs. Encryption: Kubernetes Secrets are indeed Base64 encoded by default. However, Base64 is an encoding scheme, not an encryption algorithm. It's used to safely transmit binary data as text but does not provide any confidentiality or security against unauthorized access. It's easily reversible.

Encryption at Rest: For true encryption at rest of Kubernetes Secrets, you need to configure encryption providers in the etcd data store. By default, Secrets are stored as plaintext (albeit Base64 encoded) in etcd.