--- apiVersion: v1 kind: ConfigMap metadata: name: credentials-sync data: ACR_NAME: my-registry KUBE_SECRET: acr-my-registry # does not yet exist -- will be created in the same Namespace SYNC_PERIOD: "3600" # ACR tokens expire every 3 hours; refresh faster than that