文章目录

how.nice.to.lookfairlyNice[rootk8s-01

chapter08]#

enemies.cheat.levelnoGoodRotten

secret.code.passphraseUUDDLRLRBABAS

kubectl

enemies.cheat.levelnoGoodRotten

secret.code.passphraseUUDDLRLRBABAS

secret.code.lives30

|-enemiesalienslives3enemies.cheattrueenemies.cheat.levelnoGoodRottensecret.code.passphraseUUDDLRLRBABASsecret.code.allowedtruesecret.code.lives30ui.properties:

|-color.goodpurplecolor.badyellowallow.textmodetruehow.nice.to.lookfairlyNice

kind:

2023-08-25T04:17:47ZmanagedFields:-

apiVersion:

/api/v1/namespaces/default/configmaps/game-configuid:

c0dac33b-5f6c-4647-a18e-dc3432093fca创建键值

[rootk8s-01

--from-literalspecial.typecharm

created

ConfigMapmetadata:creationTimestamp:

2023-08-25T04:33:07ZmanagedFields:-

apiVersion:

/api/v1/namespaces/default/configmaps/special-configuid:

75ae4409-5d05-4cff-ae0e-2181f06295d1

kind:

pod-single-configmap-env-variable.yaml

apiVersion:

SPECIAL_LEVEL_KEYvalueFrom:configMapKeyRef:#

The

NGINX_PORTtcp://10.104.210.165:80

MY_SERVICE_PORT_80_TCP_ADDR10.104.130.24

KUBERNETES_SERVICE_PORT_HTTPS443

KUBERNETES_PORT_443_TCPtcp://10.96.0.1:443

HELLO_PORTtcp://10.109.229.1:80

KUBERNETES_SERVICE_HOST10.96.0.1

HELLO_SERVICE_PORT80

MY_SERVICE_PORT_80_TCP_PROTOtcp

NGINX_PORT_80_TCP_ADDR10.104.210.165

FRONTEND_SERVICE_HOST10.109.68.171

[rootk8s-01

pod-multiple-configmap-env-variable.yaml

apiVersion:

SPECIAL_LEVEL_KEYvalueFrom:configMapKeyRef:name:

special-configkey:

LOG_LEVELvalueFrom:configMapKeyRef:name:

env-configkey:

HELLO_PORT_80_TCP_ADDR10.109.229.1

KUBERNETES_PORTtcp://10.96.0.1:443

LOG_LEVELINFO

MY_SERVICE_PORT_80_TCPtcp://10.104.130.24:80

REDIS_MASTER_SERVICE_HOST10.106.204.32

FRONTEND_PORTtcp://10.109.68.171:80

SHLVL1

NGINX_PORT_80_TCPtcp://10.104.210.165:80

FRONTEND_PORT_80_TCP_ADDR10.109.68.171

REDIS_MASTER_PORTtcp://10.106.204.32:6379

REDIS_MASTER_PORT_6379_TCP_ADDR10.106.204.32

HELLO_PORT_80_TCPtcp://10.109.229.1:80

EXAMPLE_SERVICE_PORT_8080_TCP_ADDR10.100.94.120

EXAMPLE_SERVICE_SERVICE_HOST10.100.94.120

REDIS_MASTER_PORT_6379_TCP_PORT6379

EXAMPLE_SERVICE_PORT_8080_TCP_PORT8080

REDIS_MASTER_PORT_6379_TCP_PROTOtcp

MY_SERVICE_SERVICE_HOST10.104.130.24

EXAMPLE_SERVICE_PORT_8080_TCP_PROTOtcp

KUBERNETES_PORT_443_TCP_ADDR10.96.0.1

EXAMPLE_SERVICE_SERVICE_PORT8080

EXAMPLE_SERVICE_PORTtcp://10.100.94.120:8080

PATH/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

NGINX_SERVICE_HOST10.104.210.165

FRONTEND_PORT_80_TCPtcp://10.109.68.171:80

KUBERNETES_PORT_443_TCP_PORT443

KUBERNETES_PORT_443_TCP_PROTOtcp

MY_SERVICE_PORTtcp://10.104.130.24:80

REDIS_MASTER_PORT_6379_TCPtcp://10.106.204.32:6379

EXAMPLE_SERVICE_PORT_8080_TCPtcp://10.100.94.120:8080

NGINX_SERVICE_PORT80

NGINX_PORTtcp://10.104.210.165:80

MY_SERVICE_PORT_80_TCP_ADDR10.104.130.24

KUBERNETES_SERVICE_PORT_HTTPS443

KUBERNETES_PORT_443_TCPtcp://10.96.0.1:443

HELLO_PORTtcp://10.109.229.1:80

KUBERNETES_SERVICE_HOST10.96.0.1

HELLO_SERVICE_PORT80

MY_SERVICE_PORT_80_TCP_PROTOtcp

NGINX_PORT_80_TCP_ADDR10.104.210.165

FRONTEND_SERVICE_HOST10.109.68.171

NGINX_PORT_80_TCP_PROTOtcp在configmaps中定义所有的键值对作为容器的环境变量

[rootk8s-01

SPECIAL_TYPEcharm在pod命令中使用configmap定义的环境变量

configmap

/var/log/nginx/error.log;events

{worker_connections

mainremote_addr:$remote_addr\ttime_local:$time_local\tmethod:$request_method\turi:$request_uri\thost:$host\tstatus:$status\tbytes_sent:$body_bytes_sent\treferer:$http_referer\tuseragent:$http_user_agent\tforwardedfor:$http_x_forwarded_for\trequest_time:$request_time;access_log

main;server

/etc/nginx/virtualhost/virtualhost.conf;}virtualhost.conf:

|upstream

/var/log/nginx/app.error_log;location

{proxy_pass

http://www.baidu.com;proxy_http_version

1.1;}}

--from-file./password.txt手工创建密钥

把信息转换成base64编码

配置文件参考secret-volume.yaml文件密钥文件作为指定路径的映射

配置文件参考secret-special-path.yaml将秘钥作为环境变量

配置文件参考secret-env-pod.yaml[rootk8s-01

chapter08]#

4oCTbiDigJhhZG1pbuKAmQopassword:

4oCTbiDigJgxZjJkbDMyZTY3ZGbigJkK

[rootk8s-01

SECRET_USERNAMEvalueFrom:secretKeyRef:name:

mysecretkey:

SECRET_PASSWORDvalueFrom:secretKeyRef:name:

mysecretkey:

--from-file.dockerconfigjson/root/.docker/config.json

--typekubernetes.io/dockerconfigjson第二种方法

在命令行中创建密钥

--docker-serveryour-registry-server

--docker-emailyour-email[rootk8s-01

chapter08]#

mike0405/nginx:latestimagePullSecrets:-

name:

https://edu.csdn.net/learn/27763/375906?spm1002.2001.3001.4157