Lesson 2.3
ConfigMaps and Secrets
Configuration belongs outside the image. Secrets look like ConfigMaps but need encryption at rest and tighter access control.
16mAdvanced6,408 students
Sign in to watch this lesson
Browsing is free. Create an account to play videos and track your progress.
Overview
Configuration belongs outside the image. Secrets look like ConfigMaps but need encryption at rest and tighter access control.
What this lesson covers
- Inject configuration as environment variables or files
- Keep secrets out of images and manifests
- Roll configuration changes without rebuilding
This lesson sits in Kubernetes Core Objects, part of DevOps with Docker and Kubernetes. It assumes what came before it and leads directly into the next lesson in the module.
In this lesson you will:
- Inject configuration as environment variables or files
- Keep secrets out of images and manifests
- Roll configuration changes without rebuilding
Pro Tip
A Kubernetes Secret is only base64 encoded by default. Encryption at rest and RBAC are what make it a secret.