ConfigMap

1 Env

ConfigMap

apiVersion: v1
kind: ConfigMap
metadata:
  name: cm-dev
data:
  SSH: 'false'
  User: dev

Secret

apiVersion: v1
kind: Secret
metadata:
  name: sec-dev
data:
  Key: MTIzNA==

apiVersion: v1
kind: Pod
metadata:
  name: pod-1
spec:
  containers:
  - name: container
    image: kubetm/init
    envFrom:
    - configMapRef:
        name: cm-dev
    - secretRef:
        name: sec-dev  
    

2. File

echo "Content" >> file-c.txt
kubectl create configmap cm-file --from-file=./file-c.txt

echo "Content" >> file-s.txt
kubectl create secret generic sec-file --from-file=./file-s.txt

apiVersion: v1
kind: Pod
metadata:
  name: pod-file
spec:
  containers:
  - name: container
    image: kubetm/init
    env:
    - name: file-c
      valueFrom:
        configMapKeyRef:
          name: cm-file
          key: file-c.txt
    - name: file-s
      valueFrom:
        secretKeyRef:
          name: sec-file
          key: file-s.txt  
      

3. Volume Mount(file)

   apiVersion: v1
   kind: Pod
   metadata:
     name: pod-mount
   spec:
     containers:
     - name: container
       image: kubetm/init
       volumeMounts:
       - name: file-volume
         mountPath: /mount
     volumes:
     - name: file-volume
       configMap:
         name: cm-file
     
     
     

Secret
데이터가 메모리에 저장되기 때문에 보안에 유리
한 Secret당 최대 1M까지만 저장됨