In short
ConfigMaps store non-sensitive configuration data, Secrets store sensitive values (base64-encoded, not truly encrypted by default) — both let you decouple configuration from your container images.
How to learn this
- 1Create a ConfigMap and mount it as environment variables in a Pod.
- 2Create a Secret and reference it in a Deployment, and note it's only base64-encoded, not encrypted.
- 3Learn why a real production setup often pairs Secrets with a dedicated secrets manager (Phase 12) for actual encryption.
More topics at this stop
Stuck on this topic? Ask an Insider
Get 1:1 guidance from people who've walked this exact path — on the InsideEdge app.
