LESSON 2.3
ConfigMaps and Secrets
Learn key techniques and workflows in DevOps with Docker and Kubernetes.
16m
advanced
6,408 students
Overview
Configuration belongs outside the image. Secrets look like ConfigMaps but need encryption at rest and tighter access control.
In this lesson you will:
- Inject configuration as environment variables or files
- Keep secrets out of images and manifests
- Roll configuration changes without rebuilding
Pro Tip
A Kubernetes Secret is only base64 encoded by default. Encryption at rest and RBAC are what make it a secret.