Configuration Management at a Glance

Configuration Management at a Glance An architecture diagram generated by Archify. Cluster Administrator · kubectl / manifests · Configuration Sources Cluster Administrator kubectl / manifests GitOps Pipeline · Automates · Configuration Sources GitOps Pipeline Automates External System · Integrates · Configuration Sources External System Integrates ConfigMap · General configuration data · Architecture component ConfigMap General configuration data Secret · Sensitive configuration data · Architecture component Secret Sensitive configuration data Pod · Env vars · volume mounts · image pull · Configuration Consumption Pod Env vars · volume mounts · image pull Sidecar · ConfigMap auto reload · Configuration Consumption Sidecar ConfigMap auto reload KSOPS · Secret encryption · Configuration Consumption KSOPS Secret encryption Vault Injector · Dynamic Injection · Configuration Consumption Vault Injector Dynamic Injection Creates Creates Automates Automates Integrates Integrates Environment variables · Volume mount Env vars · volume · image pull secret Auto Reload Encryption Dynamic Injection Configuration Sources Configuration Consumption Legend Workload (Pod) ConfigMap Advanced Features Secret Configuration Sources

ConfigMap

  • • General configuration data as key-value pairs, stored as plain text
  • • Consumed as environment variables or a configMap volume
  • • 1MB size limit

Secret

  • • Sensitive data such as passwords, tokens, and certificates
  • • Base64 encoded by default, supports etcd encryption
  • • Also used as an image pull secret