# secrets

Harden Kubernetes clusters for production with RBAC, network policies, pod security standards, secrets management, and admission controllers.

How to configure encryption at rest for Kubernetes secrets using KMS providers, because your secrets in etcd are stored in plaintext by default.

Integrate HashiCorp Vault with Kubernetes to eliminate static secrets from your cluster — with working manifests, threat models, and pipeline automation.