Config and Storage
Application configuration and persistent storage are the two foundations of any workload running on Kubernetes. This section covers Kuboard's "application config" and "storage" resource types, along with related snapshot and CSI (Container Storage Interface) capabilities.
Quick Navigation
| Section | Content | When to Read |
|---|---|---|
| ConfigMap / Secret | Creating, editing and referencing application config and secrets | Inject configuration and manage credentials |
| PVC / PV / StorageClass | Persistent volume claim, persistent volume and storage class | Persistent storage for stateful workloads |
| VolumeSnapshot / CSI | Volume snapshots, CSI drivers, cloning | Backup, migration and capacity expansion |
Recommended Reading Order
- Application config first — read ConfigMap / Secret and learn how to reference them from a Deployment or StatefulSet;
- Persistent storage — read PVC / PV / StorageClass to understand how the three relate, and pick the right StorageClass;
- Data protection — add VolumeSnapshot / CSI for snapshots and clones on critical stateful workloads.
Secret hygiene
Once a Secret is referenced by a workload, its content is exposed inside the Pod as files or environment variables. Grant users the minimal privilege on the secrets resource in Users and Authentication, and protect administrator accounts with MFA.