Kubernetes

Choose how to deliver secrets from Infisical to the workloads in your Kubernetes cluster.

Infisical can deliver secrets to your Kubernetes workloads in three ways. Most teams use the Kubernetes Operator.

Kubernetes Operator

Recommended

Syncs secrets from Infisical into Kubernetes Secrets or ConfigMaps, and can restart your workloads when a secret changes. The operator can also push secrets from your cluster to Infisical and issue dynamic secrets.

Agent Injector

Adds an Infisical Agent container to your pods that writes secrets to a shared volume, without creating Kubernetes Secrets.

CSI Provider

Mounts secrets into your pods as files through the Secrets Store CSI Driver, without creating Kubernetes Secrets.