Config & Secrets

Day 87 of 100 Days of MLOps. Baking configuration — and worse, credentials — into your image is inflexible and insecure. Today you learn the Kubernetes way to separate config from code: ConfigMaps for non-sensitive settings, Secrets for credentials, injected into pods as environment variables or files. You'll write and validate both, change config without rebuilding the image, and learn the one thing everyone gets wrong: a Kubernetes Secret is base64-encoded, not encrypted. Runs 100% locally on any OS.