[knlam]

this is why I use configmap instead of secrets. Why complicate yourself without the upside ¯\_(ツ)_/¯

[dharmab]

Some real concrete reasons:

- You can configure etcd to encrypt Secrets without taking the encryption performance hit on ConfigMaps

- You can configure the audit logs to log the diff whenever a ConfigMap was created or updated while only logging metadata and redacting content when Secrets are created or updated

- You can configure RBAC policies that grant access to ConfigMaps without Secrets (e.g. for a controller or operator)