What are ConfigMap and Secret?

Question

Accepted Answer

**ConfigMap** — configuration.
**Secret** — secrets.

```yaml
# ConfigMap
apiVersion: v1
kind: ConfigMap
metadata:
  name: app-config
data:
  APP_ENV: production
  LOG_LEVEL: info
  config.json: |
    {"key": "value"}

# Secret
apiVersion: v1
kind: Secret
metadata:
  name: app-secret
type: Opaque
data:
  DB_PASSWORD: cGFzc3dvcmQ=
  API_KEY: c2VjcmV0
```

```yaml
# Usage in Deployment
spec:
  containers:
  - name: app
    envFrom:
    - configMapRef:
        name: app-config
    - secretRef:
        name: app-secret
    env:
    - name: DB_HOST
      valueFrom:
        configMapKeyRef:
          name: app-config
          key: DB_HOST
```

**Differences:**
- ConfigMap: non-sensitive data.
- Secret: encrypted data (base64).

DevOps: What are ConfigMap and Secret?