Deploying the Kubernetes Secrets
Sitecore Kubernetes deployments use Secrets to securely store the strings the containers in the cluster use.
The Secrets are used to store database user names, passwords, and TLS certificates. The Secrets are configured in text files and certificate files (tls.crt and tls.key) and are stored in the Kubernetes specification files for each topology in the ./secrets/ folder.
You must deploy the Secrets to the K8s cluster before you deploy any Sitecore containers.
You must update the Secret text files (.txt, .crt, .key) with the required values before you deploy any additional resources to the K8s cluster.
The content in secrets must be encoded in UTF-8 format.
For a complete list of Secrets and more information about the individual Secrets, see The Kubernetes Secrets list.
In the Sitecore Experience Platform container package, in the k8s\<version>\<topology>\secrets folder, there is a Kubectl kustomization.yaml file that deploys all the Secret names and values with a single command.