Kubernetes Security and Configuration Management with Immutable ConfigMaps

Configmaps can be accessed and modified. Configmaps are used to mount important configuration data in pods.           

By (accidentally) changing the configmap, an application can either stop working or be taken over.  

Since v.1.19 immutable configmaps, which once created, can no longer be changed. To do this, change the following in the yaml:

apiVersion: v1
kind: ConfigMap
metadata:
  ...
data:
  ...
immutable: true