ConfigMaps and Secrets
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
separate configuration from images.
Planned topics
- ConfigMap: non-sensitive settings as environment variables or files.
- Secret: sensitive values, base64-encoded (not encrypted by default); enable encryption at rest and strict RBAC.
- Better: an external secrets manager synced by an operator (see MID-054).
- Changing a ConfigMap does not restart pods automatically; plan the rollout.
Draft outline details
Demonstration
envFrom: configMapRef for settings and a Secret mounted as a file for the database password.
Check your understanding
Is a Kubernetes Secret encrypted by default?
Show answer
No, only base64-encoded; enable encryption at rest and RBAC.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.