Which resource stores non-secret configuration data?

Which resource stores non-secret configuration data?

• A. PersistentVolume
• B. Deployment
• C. Secret
• D. ConfigMap

Answer: (D)

ConfigMaps store non-sensitive configuration data for pods. They’re used to decouple configuration from the container image, so you can adjust settings without rebuilding the image. The data in a ConfigMap can be exposed to containers either as environment variables or as files mounted into the filesystem. For example, a ConfigMap can hold keys like LOG_LEVEL or FEATURE_T flag values. A pod can bring these into the container by using envFrom to populate environment variables from the map, or by mounting the ConfigMap as a volume so the container reads files under /etc/config. This is ideal for non-secret configuration, such as runtime flags, feature toggles, or endpoint names. In contrast, Secrets are intended for sensitive data such as passwords or tokens and have different handling (more restricted access and optional encryption at rest). PersistentVolume is about persistent storage rather than configuration, and a Deployment defines the workload, not configuration data.

ConfigMaps store non-sensitive configuration data for pods. They’re used to decouple configuration from the container image, so you can adjust settings without rebuilding the image. The data in a ConfigMap can be exposed to containers either as environment variables or as files mounted into the filesystem.

For example, a ConfigMap can hold keys like LOG_LEVEL or FEATURE_T flag values. A pod can bring these into the container by using envFrom to populate environment variables from the map, or by mounting the ConfigMap as a volume so the container reads files under /etc/config. This is ideal for non-secret configuration, such as runtime flags, feature toggles, or endpoint names.

In contrast, Secrets are intended for sensitive data such as passwords or tokens and have different handling (more restricted access and optional encryption at rest). PersistentVolume is about persistent storage rather than configuration, and a Deployment defines the workload, not configuration data.