← Kubernetes learning pathKubernetes · Module 5 of 10
Configuration and secrets
Pass settings and sensitive data to apps.
📖 Key ideas
- ConfigMaps store non-secret configuration.
- Secrets store passwords and tokens (base64-encoded, not encrypted by default).
- Inject as environment variables or mounted files.
- Enable encryption at rest for Secrets or use external secret managers.
- Keep config out of container images.
💡 Real-life example: ConfigMaps are notice boards; Secrets are locked drawers; both are separate from the app itself.
ConfigMapNon-secret configuration
SecretSensitive data object
Environment variableConfig injected into containers
External SecretsSyncs secrets from cloud vaults