[CKA] - Secret 운영

[선수 작업]

kubectl config set-context k8s --user=kubernetes-admin --cluster=kubernetes

 

---

 

[문제]

• 작업 클러스터: k8s
• Create a Kubernetes secret and expose using a file in the pod.
  • Create a Kubernetes Secret as follows:
    • Name: super-secret
    • DATA: password=secretpass
• Create a Pod named pod-secrets-via-file, using the redis image, which mounts a secret named super-secret at /secrets.
• Create a second Pod named pod-secrets-via-env, using the redis image, which exports password as PASSWORD.

---

 

[풀이]

kubectl config use-context k8s

* k8s 클러스터 사용

 

kubectl create secret generic super-secret --from-literal="password=secretpass"

* secret 생성

 

kubectl get secrets

* 생성된 secret 확인

 

apiVersion: v1
kind: Pod
metadata:
  name: pod-secrets-via-file
spec:
  containers:
  - name: mypod
    image: redis
    volumeMounts:
    - name: foo
      mountPath: "/secrets"
  volumes:
  - name: foo
    secret:
      secretName: super-secret

* yaml 파일을 생성하여 secret 마운트

 

kubectl apply -f pod-secrets-via-file.yaml

* yaml 파일 실행

 

kubectl get pods

* Pod 확인

 

kubectl exec pod-secrets-via-file -it -- ls /secrets
kubectl exec pod-secrets-via-file -it -- cat /secrets/password

* secret 확인

 

secret 확인

 

apiVersion: v1
kind: Pod
metadata:
  name: pod-secrets-via-env
spec:
  containers:
  - name: envars-test-container
    image: redis
    env:
    - name: PASSWORD
      valueFrom:
        secretKeyRef:
          name: super-secret
          key: password

* yaml 파일 생성하여 env로 설정 

 

kubectl apply -f pod-secrets-via-env.yaml

* yaml 파일 실행

 

kubectl exec pod-secrets-via-env -it -- env

* 환경변수 확인

 

환경변수 확인

---

[참고]

Secrets

 

Distribute Credentials Securely Using Secrets