Use a Secret in a pod

Prerequisites

• A Secret named secret-test is created by using the following YAML template:

  apiVersion: v1
  kind: Secret
  metadata:
    name: secret-test
  type: Opaque
  data:
    username: admin
    password: 12345  #You must encode your password by using Base64.

  For more information about how to create a secret, see Create a Secret.

• The Secret and pod share the same cluster and namespace.
• The Master node of your Kubernetes cluster is connected. For more information, see Connect to a Kubernetes cluster by using kubectl.

Use a Secret to configure pod volumes

You can configure pod volumes by using either of the following methods:

• Method 1: Configure pod volumes by running the kubectl apply -f <example0.yaml> command.
  Note You must replace the example0.yaml file with the name of the target YAML file.
• Method 2: Configure pod volumes in the Container Service console.
  1. Log on to the Container Service console.
  2. In the left-side navigation pane under Container Service-Kubernetes, choose Application > Deployment.
  3. In the upper-right corner, click Create from Image. For information about how to create a deployment application by using an image, see Create a deployment application by using an image.
     In the Volume section of the Container tab, click Add Local Volume, select Secret from the PV Type drop-down list, select secret-test from the Mount Source drop-down list, and set Container Path to the path where secret-test is saved.
     
     

A Secret can be used as a file in a pod. For example, the username and password of the Secret (secret-test) is saved to the /srt directory as a file.

apiVersion: v1
kind: Pod
metadata:
  name: pod0
spec:undefined containers:
  - name: redis
    image: redis
    volumeMounts:
    - name: srt
      mountPath: "/srt "
      readOnly: true
  volumes:
  - name: srt
    secret:
      secretName: secret-test

Use a Secret to configure environment variables

You can configure environment variables by using either of the following methods:

• Method 1: Configure environment variables by running the kubectl apply -f <example1.yaml> command.
  Note You must replace the example1.yaml file with the name of the target YAML file.
• Method 2: Configure environment variables in the Container Service console.
  1. Log on to the Container Service console.
  2. In the left-side navigation pane under Container Service-Kubernetes, choose Application > Deployment.
  3. In the upper-right corner, click Create from Image. For information about how to create a deployment application by using an image, see Create a deployment application by using an image.
     In the Environment Variable section of the Container tab, click Add, select Secret from the Type drop-down list, select secret-test from the Value/ValueFrom drop-down list, select the target keys, and enter a name for the variables.
     
     

For more information about Secrets, see Secrets.