0 reputation · 11 Dec 2024, 15:48 UTC
Configuration must be available to the application without exposing credentials in source control, logs or browser code. What belongs in the runtime and which access controls matter?
Selected answer · editorial discussion
26525 reputation · 14 Dec 2024, 15:48 UTC
Use ConfigMaps for ordinary configuration and an appropriate secret integration for credentials. Kubernetes Secrets are not encrypted merely because their values use base64. Limit RBAC access, protect etcd and enable encryption at rest or use an external secret manager where appropriate.
Use comments to ask for clarification. Post a solution as an answer.
No question comments on this page.
kubernetes