envFrom:
- secretRef:
name: mysecret
chúng ta tạo 1 secret va deploymet:
apiVersion: apps/v1
kind: Deployment
metadata:
name: deployapp
spec:
replicas: 1
selector:
matchLabels:
app: deployapp
template:
metadata:
name: podapp
labels:
app: deployapp
spec:
containers:
- name: test-container
image: gcr.io/google_containers/busybox
command: [ "/bin/sh", "-c", "env" ]
envFrom:
- secretRef:
name: mysecret
---
apiVersion: v1
kind: Secret
metadata:
name: mysecret
type: Opaque
data:
username: YWRtaW4=
password: MWYyZDFlMmU2N2Rm
root@master-k8s:/home/k8s/hometest-tiki/envFromSecret# kubectl apply -n lab -f .
deployment.apps/deployapp created
secret/mysecret created
Thực hiện check logs của pod
root@master-k8s:/home/k8s/hometest-tiki/envFromSecret# kubectl logs -n lab pod/deployapp-848fddb969-t2zwl
KUBERNETES_SERVICE_PORT=443
KUBERNETES_PORT=tcp://10.96.0.1:443
HOSTNAME=deployapp-848fddb969-t2zwl
SHLVL=1
HOME=/root
username=admin
KUBERNETES_PORT_443_TCP_ADDR=10.96.0.1
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
KUBERNETES_PORT_443_TCP_PORT=443
KUBERNETES_PORT_443_TCP_PROTO=tcp
password=1f2d1e2e67df
KUBERNETES_SERVICE_PORT_HTTPS=443
KUBERNETES_PORT_443_TCP=tcp://10.96.0.1:443
PWD=/
KUBERNETES_SERVICE_HOST=10.96.0.1
Links tham khả0
https://dchua.com/2017/04/21/load-env-variables-from-configmaps-and-secrets-upon-pod-boot/
https://cloudfun.vn/threads/tim-hieu-cach-dinh-cau-hinh-ung-dung-kubernetes-bang-configmap.399/