Where can i store passwords and use them from in kubernetes deployment

Question

i have simple logstash deployment and i like to store the sensitive passwords in secret in Kubernetes

apiVersion: v1
kind: ConfigMap
metadata:
  name: logstas