Kubernetes
Two operators consume ESC values inside a Kubernetes cluster. Pick based on whether you want ESC values exposed as Secret objects or mounted directly into pods at runtime.
| Pattern | What it does |
|---|---|
| External Secrets Operator (ESO) | Sync ESC values into Kubernetes Secret objects via ESO. |
| Secrets Store CSI Driver | Mount ESC values directly into pods as files via the upstream CSI driver. |
For using ESC to store and serve kubeconfig files for kubectl, helm, or the Pulumi Kubernetes provider, see the Kubernetes cluster access guide.