📄 YAMLmedium
6. Fix the plaintext-in-data Secret
This Secret is wrong: it puts a PLAINTEXT password under `data`, but `data` requires base64 (plaintext there is a bug). Fix it by moving the value to `stringData` instead (let Kubernetes encode it). Keep name = app-secret, type = Opaque, password = hunter2 — and remove the bad `data` entry.
How to approach this
`data` values must be base64; a plaintext value there is either rejected or silently mis-decoded. The clean fix is to use `stringData` (which takes plaintext and is encoded for you) and remove the `data.password` entry entirely. Leaving both is contradictory. (You could instead base64-encode into `data`, but `stringData` is clearer for hand-written manifests.)
config.yaml