A school district discovers API tokens stored in a ConfigMap that was committed to git. What correction aligns with Kubernetes configuration practice?
Select an answer to reveal the explanation.
Short Explanation
If it is a password or token, it does not belong on the hallway bulletin board. Move it into a Secret—and better yet an external secret manager—not a ConfigMap living in git.
Full Explanation
Sensitive credentials belong in Secret objects (with stronger external secret management when possible), not ConfigMaps. Renaming keys, converting to Services, or baking tokens into public images does not correct the misuse of ConfigMaps for confidential data.