Secret
A practical DevOps definition, with an example you can use.
Sensitive configuration such as a password, access token, or private key that requires controlled access and handling.
An example you can picture
The application obtains a database credential at runtime from an approved secret store. Its repository contains the configuration key name, not the credential value.
The distinction that matters
Encoding is not encryption. Kubernetes Secret values are commonly base64-encoded in manifests, which does not make a committed credential safe.
Put it into practice
Review a sample repository using fake credentials only. Identify where a secret would enter the application and who could read it. Explain why a base64-encoded value still needs protection.
Connect the ideas: iam and environment variable. For the bigger picture, read the related learning guide.
Reference
Read the primary documentation for the underlying concept and further detail.