Question

Your team is deploying a web application that connects to a PostgreSQL database. The application needs a database username, a password, and a non-sensitive log level setting (e.g., 'info'). You want to follow Kubernetes best practices for storing this data so that the password is not exposed in plain text in your general configuration objects. How should you store these values?

Accepted Answer

Store the username and password in a Secret, and the log level in a ConfigMap.

Answer

Store all three values in a single ConfigMap so they are managed together.

Answer

Store all three values in a Secret because they are all consumed by the same Pod.

Answer

Hard-code all three values as environment variables directly in the Deployment manifest.