Volume - Secret

Secret Volume Mount

ConfigMap & Secret Setting

apiVersion: v1
kind: ConfigMap
metadata:
  name: nginx-config
data:
  ENV1: hello
YAML
복사

apiVersion: v1
kind: Secret
metadata:
  name: nginx-secret
stringData:
  ENV2: hello
YAML
복사

kubectl apply -f configmap.yaml && kubectl apply -f secret.yaml
Shell
복사

Deployment Apply

apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx
spec:
  selector:
    matchLabels:
      app: nginx
  template:
    metadata:
      name: nginx
      labels:
        app: nginx
    spec:
      containers:
      - name: nginx
        image: nginx:latest
        envFrom:
        - configMapRef:
            name: nginx-config
        - secretRef:
            name: nginx-secret
        volumeMounts:
        - mountPath: /tmp/config
          name: nginx-config
        - mountPath: /tmp/secret
          name: nginx-secret
      volumes:
      - name: nginx-config
        configMap:
          name: nginx-config
      - name: nginx-secret
        secret:
          secretName: nginx-secret    
YAML
복사

kubectl apply -f deployment.yaml
Shell
복사

Result

kubectl exec -it <POD_NAME> -- cat /tmp/config/ENV1
> hello
kubectl exec -it <POD_NAME> -- cat /tmp/secret/ENV2
> hello
Shell
복사