mirror of https://github.com/k3s-io/k3s
97 lines
2.9 KiB
Markdown
97 lines
2.9 KiB
Markdown
<!-- BEGIN MUNGE: UNVERSIONED_WARNING -->
|
|
|
|
<!-- BEGIN STRIP_FOR_RELEASE -->
|
|
|
|
<img src="http://kubernetes.io/img/warning.png" alt="WARNING"
|
|
width="25" height="25">
|
|
<img src="http://kubernetes.io/img/warning.png" alt="WARNING"
|
|
width="25" height="25">
|
|
<img src="http://kubernetes.io/img/warning.png" alt="WARNING"
|
|
width="25" height="25">
|
|
<img src="http://kubernetes.io/img/warning.png" alt="WARNING"
|
|
width="25" height="25">
|
|
<img src="http://kubernetes.io/img/warning.png" alt="WARNING"
|
|
width="25" height="25">
|
|
|
|
<h2>PLEASE NOTE: This document applies to the HEAD of the source tree</h2>
|
|
|
|
If you are using a released version of Kubernetes, you should
|
|
refer to the docs that go with that version.
|
|
|
|
<strong>
|
|
The latest 1.0.x release of this document can be found
|
|
[here](http://releases.k8s.io/release-1.0/docs/user-guide/secrets/README.md).
|
|
|
|
Documentation for other releases can be found at
|
|
[releases.k8s.io](http://releases.k8s.io).
|
|
</strong>
|
|
--
|
|
|
|
<!-- END STRIP_FOR_RELEASE -->
|
|
|
|
<!-- END MUNGE: UNVERSIONED_WARNING -->
|
|
|
|
# Secrets example
|
|
|
|
Following this example, you will create a [secret](../secrets.md) and a [pod](../pods.md) that consumes that secret in a [volume](../volumes.md). See [Secrets design document](../../design/secrets.md) for more information.
|
|
|
|
## Step Zero: Prerequisites
|
|
|
|
This example assumes you have a Kubernetes cluster installed and running, and that you have
|
|
installed the `kubectl` command line tool somewhere in your path. Please see the [getting
|
|
started](../../../docs/getting-started-guides/) for installation instructions for your platform.
|
|
|
|
## Step One: Create the secret
|
|
|
|
A secret contains a set of named byte arrays.
|
|
|
|
Use the [`examples/secrets/secret.yaml`](secret.yaml) file to create a secret:
|
|
|
|
```console
|
|
$ kubectl create -f docs/user-guide/secrets/secret.yaml
|
|
```
|
|
|
|
You can use `kubectl` to see information about the secret:
|
|
|
|
```console
|
|
$ kubectl get secrets
|
|
NAME TYPE DATA
|
|
test-secret Opaque 2
|
|
|
|
$ kubectl describe secret test-secret
|
|
Name: test-secret
|
|
Labels: <none>
|
|
Annotations: <none>
|
|
|
|
Type: Opaque
|
|
|
|
Data
|
|
====
|
|
data-1: 9 bytes
|
|
data-2: 11 bytes
|
|
```
|
|
|
|
## Step Two: Create a pod that consumes a secret
|
|
|
|
Pods consume secrets in volumes. Now that you have created a secret, you can create a pod that
|
|
consumes it.
|
|
|
|
Use the [`examples/secrets/secret-pod.yaml`](secret-pod.yaml) file to create a Pod that consumes the secret.
|
|
|
|
```console
|
|
$ kubectl create -f docs/user-guide/secrets/secret-pod.yaml
|
|
```
|
|
|
|
This pod runs a binary that displays the content of one of the pieces of secret data in the secret
|
|
volume:
|
|
|
|
```console
|
|
$ kubectl logs secret-test-pod
|
|
2015-04-29T21:17:24.712206409Z content of file "/etc/secret-volume/data-1": value-1
|
|
```
|
|
|
|
|
|
<!-- BEGIN MUNGE: GENERATED_ANALYTICS -->
|
|
[]()
|
|
<!-- END MUNGE: GENERATED_ANALYTICS -->
|