In order to keep the immutablity of a docker image, the configuration must live outside the container image, K8 config maps enable this.
Secrets, env variables, and other environment specific items should not be baked into a container image.