[CKA] 따배씨 - 17. Secret 운영

문제

Cluster: kubectl config use-context k8s Create a Kubernetes secret and expose using a file in the pod. 1. Create a kubetnetes Secret as follows: Name: super-secret DATA: password =secretpass Create a Pod named pod-secrets-via-file, using the redis image, which mounts a secret named super-secret at /secrets . Create a second Pod named pod-secrets-via-env, using the redis image, which exports password as PASSWORD.

 

문제 풀이

# 1. context 변경
kubectl config use-context k8s

# 2. Secret 생성
kubectl create secret generic super-secret --from-literal=password=secretpass
kubectl describe secrets super-secret

# 3. pod-secrets-via-file.yaml 작성 및 생성
kubectl run pod-secrets-via-file --image=redis --dry-run=client -o yaml > pod-secrets-via-file.yaml
vim pod-secrets-via-file.yaml

....

apiVersion: v1
kind: Pod
metadata:
  labels:
    run: pod-secrets-via-file
  name: pod-secrets-via-file
spec:
  containers:
  - image: redis
    name: redis
    volumeMounts:
      - name: secret-volume
        mountPath: /secrets

  volumes:
    - name: secret-volume
      secret:
        secretName: super-secret

kubectl apply -f pod-secrets-via-file.yaml


# 4. pod-secrets-via-file pod 확인
kubectl get pods
kubectl exec pod-secrets-via-file -- ls /secrets/password
kubectl exec pod-secrets-via-file -- cat /secrets/password

# 5. pod-secrets-via-env.yaml 작성 및 생성
kubectl run pod-secrets-via-env --image=redis --dry-run=client -o yaml > pod-secrets-via-env.yaml

vim pod-secrets-via-env.yaml

....

apiVersion: v1
kind: Pod
metadata:
  labels:
    run: pod-secrets-via-env
  name: pod-secrets-via-env
spec:
  containers:
  - image: redis
    name: pod-secrets-via-env
    env:
      - name: PASSWORD
        valueFrom:
          secretKeyRef:
            name: super-secret
            key: password

kubectl apply -f pod-secrets-via-env.yaml

# 6. pod-secrets-via-env pod 확인
kubectl get pods
kubectl exec pod-secrets-via-env -- env

• Secret: https://kubernetes.io/docs/concepts/configuration/secret/
• Define container environment variables using Secret data: https://kubernetes.io/docs/tasks/inject-data-application/distribute-credentials-secure/#define-container-environment-variables-using-secret-data

Secrets