mirror of
https://github.com/containers/podman.git
synced 2025-08-06 19:44:14 +08:00
Kube Play Doc: Document the support for K8S Secret
Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
This commit is contained in:
@ -22,6 +22,7 @@ Currently, the supported Kubernetes kinds are:
|
|||||||
- Deployment
|
- Deployment
|
||||||
- PersistentVolumeClaim
|
- PersistentVolumeClaim
|
||||||
- ConfigMap
|
- ConfigMap
|
||||||
|
- Secret
|
||||||
|
|
||||||
`Kubernetes Pods or Deployments`
|
`Kubernetes Pods or Deployments`
|
||||||
|
|
||||||
@ -122,6 +123,40 @@ spec:
|
|||||||
|
|
||||||
and as a result environment variable `FOO` will be set to `bar` for container `container-1`.
|
and as a result environment variable `FOO` will be set to `bar` for container `container-1`.
|
||||||
|
|
||||||
|
`Kubernetes Secret`
|
||||||
|
|
||||||
|
Kubernetes Secret represents a Podman named secret. The Kubernetes Secret is saved as a whole and may be referred as a source of environment variables or volumes in Pods or Deployments.
|
||||||
|
|
||||||
|
For example, the following YAML document defines a Secret and then uses it in a Pod:
|
||||||
|
|
||||||
|
```
|
||||||
|
kind: Secret
|
||||||
|
apiVersion: v1
|
||||||
|
metadata:
|
||||||
|
name: foo
|
||||||
|
data:
|
||||||
|
foo: YmFy # base64 for bar
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Pod
|
||||||
|
metadata:
|
||||||
|
name: foobar
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- command:
|
||||||
|
- top
|
||||||
|
name: container-1
|
||||||
|
image: foobar
|
||||||
|
env:
|
||||||
|
- name: FOO
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: foo
|
||||||
|
key: foo
|
||||||
|
```
|
||||||
|
|
||||||
|
and as a result environment variable `FOO` will be set to `bar` for container `container-1`.
|
||||||
|
|
||||||
## OPTIONS
|
## OPTIONS
|
||||||
|
|
||||||
@@option annotation.container
|
@@option annotation.container
|
||||||
|
Reference in New Issue
Block a user