ConfigMaps and Secrets

Configuration belongs outside the image. Secrets look like ConfigMaps but need encryption at rest and tighter access control.

What this lesson covers

• Inject configuration as environment variables or files
• Keep secrets out of images and manifests
• Roll configuration changes without rebuilding

This lesson sits in Kubernetes Core Objects, part of DevOps with Docker and Kubernetes. It assumes what came before it and leads directly into the next lesson in the module.