Config Maps Are Insecure

ConfigMaps are a great way to manage innocent environment variables in Kubernetes. Things like:

• Ports
• URLs of other services
• Feature flags
• Settings that change between environments, like DEBUG mode

However, they are not cryptographically secure. ConfigMaps aren't encrypted, and they can be accessed by anyone with access to the cluster.

If you need to store sensitive information, you should use Kubernetes Secrets or a third-party solution.