--- apiVersion: v1 kind: ConfigMap metadata: name: credentials-sync data: GCR_REGISTRY: gcr.io # set the registry KUBE_SECRET: gcr-credentials # does not yet exist -- will be created in the same Namespace SYNC_PERIOD: "1800" # 30m -- GCR tokens expire every hour; refresh faster than that