Skip to lesson
supraj.dev THE ENGINEERING HANDBOOKS
LEARN / BUILD / VERIFY2026 edition · checked 06 Oct

CHAPTER 10 / 30 · Connect the workload

ConfigMaps and configuration rollout

Choose how an application receives configuration and how changes become effective.

4 min read + practiceWorked exerciseInterview practice

The mechanism

ConfigMaps hold non-confidential configuration. Applications can consume values through environment variables, mounted files or API reads. Those mechanisms have different update behavior. A changed ConfigMap does not guarantee that every running process immediately uses the new value.

Environment variables are established when a container starts. Mounted configuration can be updated by the platform with propagation delay, but the application still needs to notice and reload it; subPath mounts have additional update limitations. Treat configuration delivery and application reload as separate mechanisms.

For ParcelOps, changing log level is low risk, while changing a backend endpoint may change data flow and authority. Review configuration semantics, not only whether the YAML contains a valid string.

Configuration object
Delivery mechanism
Application reload
Observed behavior

Worked example

This is an offline container fragment referencing the ConfigMap from chapter 3. It is not a complete Pod. The value becomes an environment variable at startup; updating the source object later does not rewrite the running process environment.

containers:
  - name: api
    image: registry.example/parcelops/api:reviewed-version
    env:
      - name: LOG_LEVEL
        valueFrom:
          configMapKeyRef:
            name: parcelops-config
            key: LOG_LEVEL

Practice: predict, inspect, explain

Offline exercise. Compare three changes: an environment-backed log level, a mounted configuration file and a file mounted with subPath. For each, state what must happen before the process uses the new value. Add a version identifier to your configuration record and show how an operator could correlate it with application behavior.

Expected observation: configuration existence, delivery and consumption are separate evidence points. A deliberate rollout may be the simplest update strategy for an application that cannot reload safely. That is an application decision, not something to assume from a ConfigMap edit.

Troubleshooting and trade-offs

If the app still uses an old value, inspect its delivery mode and reload behavior before repeatedly editing the object. If a required key is absent, startup may fail; check events and references. Never move secrets into a ConfigMap to make configuration simpler. Avoid logging entire environment blocks during diagnosis.

Interview practice

Does an updated ConfigMap change existing environment variables?

No. Environment values are set when the container starts. A new container instance is needed to receive changed values through that mechanism.

Why version configuration separately?

It helps connect a behavior change to the exact configuration consumed by a workload and supports review, reproducibility and rollback planning.

Completion check

Explain how the same ConfigMap change behaves through environment variables and mounted files.

Sources and version notes

Baseline checked 6 October 2026: the official release page lists Kubernetes 1.37.1. Verify your cluster and distribution prerequisites. All manifests are offline teaching examples; no cluster mutations or cloud resources are executed by this handbook.

YOUR NEXT STEP

Make the understanding yours.

Use the completion check above. Mark this chapter when you can explain the mechanism and its limits.

Self-assessed reading progress. This does not certify that a lab ran or a system is secure.