3 ms·
this is why I use configmap instead of secrets. Why complicate yourself without the upside ¯\_(ツ)_/¯
by knlam 5y ago
this is why I use configmap instead of secrets. Why complicate yourself without the upside ¯\_(ツ)_/¯
- dharmab 5y agoSome real concrete reasons: - You can configure etcd to encrypt Secrets without taking the encryption performance hit on ConfigMaps - You can configure the audit logs to log the diff whenever a ConfigMap was created or updated while only logging metadata and redacting content when Secrets are created or updated - You can configure RBAC policies that grant access to ConfigMaps without Secrets (e.g. for a controller or operator)