important: kubernetes secrets store values base64-encoded, not encrypted. anyone who can read the Secret object can decode them. all decoding runs locally in your browser — nothing is uploaded.
[secret yaml / json]
supports multi-document yaml (---), List objects, and lone base64 blobs · built-in secret types get extra hints