> ## Documentation Index
> Fetch the complete documentation index at: https://www.1password.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Kubernetes integrations

export const Link = ({to, className = "", children}) => {
  const baseStyles = "inline-block px-6 py-3 text-center font-medium text-white no-underline transition-all duration-200";
  const buttonStyles = {
    "button--primary": "mint-bg-[#0969DA] hover:mint-bg-[#0860CA] mint-rounded-lg mint-border-b-0",
    "button--secondary": "mint-bg-gray-600 hover:mint-bg-gray-700 mint-rounded-lg mint-border-b-0"
  };
  const classes = className.split(" ");
  const buttonClass = classes.find(c => c.startsWith("button--"));
  const otherClasses = classes.filter(c => !c.startsWith("button"));
  const appliedStyles = buttonClass ? `${baseStyles} ${buttonStyles[buttonClass] || ""} ${otherClasses.join(" ")}` : `${baseStyles} ${className}`;
  return <a href={to} className={appliedStyles}>
      {children}
    </a>;
};

You can use Kubernetes integrations to deploy a [1Password Connect Server](/connect/) or a [1Password Service Account](/service-accounts/) to a Kubernetes cluster.

1Password offers multiple Kubernetes integrations, including the [Kubernetes Secrets Injector](#kubernetes-injector), the [Kubernetes Operator](#kubernetes-operator), and [Helm charts](#1password-helm-charts) (which support both the Kubernetes Injector and the Kubernetes Operator). The best integration option depends on your unique environment.

## Comparison

Both the Kubernetes Injector and the Kubernetes Operator work by allowing you to inject secrets from 1Password into a Kubernetes environment. However, they vary slightly based on your intended use case and their requirements.

The 1Password Helm charts allow you to more easily deploy a Connect server, the Kubernetes Operator, or the Kubernetes Injector.

Refer to the following table to learn the differences between the integrations.

| **Feature**                                                 | [**Kubernetes Injector**](#kubernetes-injector) | [**Kubernetes Operator**](#kubernetes-operator) |
| ----------------------------------------------------------- | ----------------------------------------------- | ----------------------------------------------- |
| Supports service accounts                                   | <span class="badge badge--primary">Yes</span>   | <span class="badge badge--primary">Yes</span>   |
| Supports Connect servers                                    | <span class="badge badge--primary">Yes</span>   | <span class="badge badge--primary">Yes</span>   |
| Allows for granular selection of secrets                    | <span class="badge badge--primary">Yes</span>   | <span class="badge badge--secondary">No</span>  |
| Uses Kubernetes Secrets                                     | <span class="badge badge--secondary">No</span>  | <span class="badge badge--primary">Yes</span>   |
| Injects 1Password items directly into Kubernetes pods       | <span class="badge badge--primary">Yes</span>   | <span class="badge badge--secondary">No</span>  |
| Works with multiple credentials simultaneously              | <span class="badge badge--primary">Yes</span>   | <span class="badge badge--secondary">No</span>  |
| Supports automatic redeployment when 1Password items change | <span class="badge badge--secondary">No</span>  | <span class="badge badge--primary">Yes</span>   |
| Requires a Connect token to deploy                          | <span class="badge badge--secondary">No</span>  | <span class="badge badge--primary">Yes</span>   |

### Kubernetes Injector

The 1Password Kubernetes Secrets Injector implements a mutating webhook that allows you to inject 1Password secrets as environment variables into a Kubernetes pod or deployment. You can use the Kubernetes Injector with [Connect servers](/connect/) or [service accounts](/service-accounts/).

<Link className="button button--primary" to="/k8s/injector/">
  Get started with the Kubernetes Injector
</Link>

### Kubernetes Operator

The 1Password Connect Kubernetes Operator integrates [Kubernetes Secrets <Icon icon="arrow-up-right-from-square" />](https://kubernetes.io/docs/concepts/configuration/secret/) with 1Password with one or more Connect servers or service accounts. It allows you to:

* Create Kubernetes Secrets from 1Password items and load them into Kubernetes deployments.
* Automatically restart deployments when 1Password items update.

<Link className="button button--primary" to="/k8s/operator/">
  Get started with the Kubernetes Operator
</Link>

### 1Password Helm charts

[Helm <Icon icon="arrow-up-right-from-square" />](https://helm.sh/) is a tool that helps you manage Kubernetes applications through specification files called Helm charts. Helm charts define a Kubernetes application and make it easy to share, install, and upgrade.

The official 1Password Helm charts allow you to create a Secrets Automation workflow deployment using a predefined specification.

<Link className="button button--primary" to="/k8s/helm/">
  Get started 1Password Helm charts
</Link>