What is Kubernetes ConfigMap and Secret?

Question

Accepted Answer

**ConfigMap** — non-confidential configuration. **Secret** — base64-encoded sensitive data.

```yaml
# ConfigMap
apiVersion: v1
kind: ConfigMap
metadata:
  name: app-config
data:
  DATABASE_HOST: "postgres"
  LOG_LEVEL: "info"
  config.json: |
    {"features": {"darkMode": true}}
---
# Secret
apiVersion: v1
kind: Secret
metadata:
  name: app-secrets
type: Opaque
data:
  DB_PASSWORD: cGFzc3dvcmQxMjM=  # base64 encoded
  API_KEY: c2VjcmV0a2V5
```

```yaml
# Usage in Pod
containers:
- name: app
  envFrom:
  - configMapRef:
      name: app-config
  - secretRef:
      name: app-secrets
```

**Important:** Secret is only base64, NOT encrypted. Use encryption at rest for true security.

DevOps: What is Kubernetes ConfigMap and Secret?