K8s/Secret: Difference between revisions

From Chorke Wiki
Jump to navigation Jump to search
Line 122: Line 122:


|valign='top'|
|valign='top'|
* [[K8s/MediaWiki|K8s » MediaWiki]]
* [[K8s/Nexus|K8s » Nexus]]
* [[K8s/N8N|K8s » N8N]]


|valign='top'|
|valign='top'|

Revision as of 16:24, 27 July 2025

K8s » Secret » Usages

K8s » Secret » Usages

cat <<'YML'| kubectl apply -n academia -f -
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: minio
data:
  v4auth: true
  pathstyle: true
  region: us-east-1
  bucket: gitlab-registry
  accesskey: Tnen3kCv71osfJKkhcIP
  regionendpoint: "http://minio.minio:9000"

---
apiVersion: v1
kind: Secret
metadata:
  name: mariadb
type: Opaque
data:
  mariadb-replication-password: sadaqah!
  mariadb-root-password: sadaqah!
  mariadb-password: sadaqah!

---
apiVersion: v1
kind: Secret
metadata:
  name: postgresql
type: Opaque
data:
  replication-password: sadaqah!
  postgres-password: sadaqah!
  password: sadaqah!

---
apiVersion: v1
kind: Secret
metadata:
  name: certificate
type: Opaque
data:
  challenge-password: sadaqah!
  rootca-pass-phrase: sadaqah!
  subca-pass-phrase: sadaqah!
YML
cat <<'YML'| kubectl apply -n academia -f -
---
apiVersion: v1
kind: Pod
metadata:
  name: academia
spec:
  containers:
  - name: academia
    image: harbor.shahed.biz/academia/nginx:latest
    env:
      - name: MYSQL_PWD
        valueFrom:
          secretKeyRef:
            name: mariadb
            key: mariadb-password
      - name: PGPASSWORD
        valueFrom:
          secretKeyRef:
            name: postgresql
            key: password
      - name: ROOTCA_PASS_PHRASE
        valueFrom:
          secretKeyRef:
            name: certificate
            key: rootca-pass-phrase
      - name: SUBCA_PASS_PHRASE
        valueFrom:
          secretKeyRef:
            name: certificate
            key: subca-pass-phrase
      - name: S3_BUCKET
        valueFrom:
          configMapKeyRef:
            name: minio
            key: bucket
      - name: S3_REGION
        valueFrom:
          configMapKeyRef:
            name: minio
            key: region
    envFrom:
      - secretRef:
          name: academia
      - configMapRef:
          name: academia
YML

References