Kubernete, when to use secrets instead of configmap?

Question

What are the differences between secrets and configuration in terms of security?

When would I like to use a secret instead of configmap?

Answer 1

Secrets are stored in encoding and over time become more secure (for example, limited access, encrypted at rest, etc.). Secrets existed before the creation of ConfigMap, so until recently it was generally accepted to store configuration data in secrets (for example, conf2kube ).

You must use secrets for sensitive data (database passwords, private keys) and ConfigMaps for insensitive configuration data.