On the city’s Kubernetes cluster, a Catalyst Center sync pod needs…

Question

On the city’s Kubernetes cluster, a Catalyst Center sync pod needs an API token. Which store is appropriate for that credential?

Accepted Answer

Store the credential in a Secret (or external secret operator), not in a ConfigMap or checked-in plaintext manifest. — ConfigMaps are bulletin boards; Secrets are the locked drawer. API tokens belong in a Secret (or external operator), not in ConfigMaps or git manifests.

Answer

Place the token in a ConfigMap because all non-code settings share one object type.

Answer

Check the token into the deployment manifest in git as plain YAML fields.

Answer

Write the token into an annotation on the Service for easy kubectl describe access.

On the city’s Kubernetes cluster, a Catalyst Center sync pod needs an API token. Which store is appropriate for that credential?

Short Explanation

Full Explanation