this might break spring security depending on externalized configuration order

application.yml

---
apiVersion: v1
kind: ConfigMap
metadata:
  name: helloproperties
data:
  application.yml: |
    management:
      endpoints:
        web:
          exposure:
            include: health,info,configprops
    spring:
      security:
        user:
          roles: ACTUATOR
          # user:
          # password:

commenting out the user/password broke my spring security demo in the kubernetes talk at MAJUG.

although the configprops actuator showed the "correct" username and pass from environment variables, the login prompt never showed (sorry :-) )