Security

Learn about security considerations when using the Doppler Kubernetes Operator

Enable Kubernetes Secret Encryption at Rest

The Doppler Kubernetes Operator usesΒ Kubernetes SecretsΒ to store sensitive data.

Kubernetes Secrets are, by default, stored as unencrypted base64-encoded strings. By default they can be retrieved - as plain text - by anyone with API access, or anyone with access to Kubernetes' underlying data store, etcd. Therefore, Kubernetes recommends enablingΒ encryption at restΒ to secure this data.