zoukankan      html  css  js  c++  java
  • k8s-secret用法


    创建username和password文件:
    $ echo -n "admin" > ./username
    $ echo -n "1f2d1e2e67df" > ./password
    用kubectl生成secret对象:
    $ kubectl create secret generic db-user-pass --from-file=./username --from-file=./password
    secret "db-user-pass" created
    
    
    
     

    pod中引用Secret

    apiVersion: v1
    kind: Pod
    metadata:
      name: secret-env-pod
    spec:
      containers:
      - name: mycontainer
        image: redis
        env:
          - name: SECRET_USERNAME
            valueFrom:
              secretKeyRef:
                name: mysecret
                key: username
          - name: SECRET_PASSWORD
            valueFrom:
              secretKeyRef:
                name: mysecret
                key: password
      restartPolicy: Never
    $ kubectl get secrets
    NAME                  TYPE                                  DATA      AGE
    db-user-pass          Opaque                                2         51s
    
    $ kubectl describe secrets/db-user-pass
    Name:            db-user-pass
    Namespace:       default
    Labels:          
    Annotations:     
    
    Type:            Opaque
    
    Data
    ====
    password:    12 bytes
    username:    5 bytes

    手动创建 SECRET

    您也可以先以 json 或 yaml 格式在文件中创建一个 secret 对象,然后创建该对象。

    每一项必须是 base64 编码:

    $ echo -n "admin" | base64
    YWRtaW4=
    $ echo -n "1f2d1e2e67df" | base64
    MWYyZDFlMmU2N2Rm
    apiVersion: v1
    kind: Secret
    metadata:
      name: mysecret
    type: Opaque
    data:
      username: YWRtaW4=
      password: MWYyZDFlMmU2N2Rm
  • 相关阅读:
    MVC之Servlet控制器(二)
    MVC之Servlet控制器(一)
    基于Java实现批量下载网络图片
    @ModelAttribute运用详解
    MyBatis
    理解RESTful架构
    并行计算结课论文边写边总结2
    并行计算结课论文边写边总结(1)
    CUDA笔记(六)
    ubuntu12.04
  • 原文地址:https://www.cnblogs.com/fuyuteng/p/11413679.html
Copyright © 2011-2022 走看看