# Reflector (/docs/runtime/components/reflector)



Component Category [#component-category]

Access and security / secret and configuration propagation

Component Description [#component-description]

Reflector is a Kubernetes controller that replicates selected secrets and config maps across namespaces.

Why It Is Used [#why-it-is-used]

In BullSequana AI Runtime, Reflector simplifies multi-namespace platform operations by propagating shared configuration and selected secrets to the workloads that need them. This reduces duplication and helps keep cross-namespace configuration consistent.

Learn More [#learn-more]

* [emberstack/kubernetes-reflector on GitHub](https://github.com/emberstack/kubernetes-reflector)

Interacts With [#interacts-with]

* `cert-manager`, which can produce certificates that need to be reflected into workload namespaces.
* `Keycloak`, `OpenBao`, and other platform services whose shared configuration or secrets may need controlled propagation.
* `Argo CD`, because reflected resources are part of the GitOps-managed operating model even when the replication itself is controller-driven.