【K8S】secret来配置K8S应用(环境变量)--20220916

最新推荐文章于 2024-01-09 20:59:59 发布

i see the future

最新推荐文章于 2024-01-09 20:59:59 发布

阅读量549

点赞数

分类专栏： kubernetes 文章标签： kubernetes 容器云原生

本文链接：https://blog.csdn.net/m0_46629123/article/details/126891240

版权

kubernetes 专栏收录该内容

36 篇文章 1 订阅

订阅专栏

参考链接https://blog.csdn.net/jerry00713/article/details/123220938

步骤1：Base64加密

http://www.jsons.cn/base64/

步骤2：创建secret

方法1：yaml档来设定secret

apiVersion: v1
kind: Secret
metadata:
  name: secret1
data:
  #REDISPASSWORD: redis654321
  REDISPASSWORD: cmVkaXM2NTQzMjE=

方法2：racher直接keyin secret

在这里插入图片描述

步骤3：查看或修改secret

在这里插入图片描述

也可以通过命令行kubectl get secret -o yaml来查看。

步骤3：使用configmap来配置

可以使用环境变量

      env:
      - name: REDIS_LOCATION
        valueFrom:
          configMapKeyRef:
            name: config1
            key: REDIS_LOCATION
      - name: DJANGO_DEBUG
        valueFrom:
          configMapKeyRef:
            name: config1
            key: DJANGO_DEBUG
      - name: REDISPASSWORD
        valueFrom:
          secretKeyRef:
            name: secret1
            key: REDISPASSWORD

完整的web的yaml档案

apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    kompose.cmd: kompose convert
    kompose.version: 1.24.0 (7c629530)
  creationTimestamp: null
  labels:
    io.kompose.service: web
  name: web
spec:
  replicas: 1
  selector:
    matchLabels:
      io.kompose.service: web
  strategy:
    type: Recreate
  template:
    metadata:
      annotations:
        kompose.cmd: kompose convert
        kompose.version: 1.24.0 (7c629530)
      creationTimestamp: null
      labels:
        io.kompose.service: web
    spec:
      containers:
        - command:
            - /bin/sh
            - /code/package/start.sh
          image: seasonzhang/gaga_meeting:0.9.16
          imagePullPolicy: IfNotPresent
          name: gaga-meeting-web
          ports:
            - containerPort: 8000
          resources:
            requests:
              cpu: 500m
              memory: 500Mi
            limits:
              cpu: 500m
              memory: 500Mi
          env:
          - name: REDIS_LOCATION
            valueFrom:
              configMapKeyRef:
                name: config1
                key: REDIS_LOCATION
          - name: DJANGO_DEBUG
            valueFrom:
              configMapKeyRef:
                name: config1
                key: DJANGO_DEBUG
          - name: REDISPASSWORD
            valueFrom:
              secretKeyRef:
                name: secret1
                key: REDISPASSWORD
        - command:
            - /bin/sh
            - /code/package/start-beat.sh
          image: seasonzhang/gaga_meeting:0.9.16
          name: gaga-meeting-beat
          resources:
            requests:
              cpu: 100m
              memory: 100Mi
            limits:
              cpu: 200m
              memory: 200Mi
        - command:
            - /bin/sh
            - /code/package/start-celery.sh
          image: seasonzhang/gaga_meeting:0.9.16
          name: gaga-meeting-celery
          resources:
            requests:
              cpu: 100m
              memory: 100Mi
            limits:
              cpu: 200m
              memory: 200Mi
---
apiVersion: v1
kind: Service
metadata:
  annotations:
    kompose.cmd: kompose convert
    kompose.version: 1.24.0 (7c629530)
  creationTimestamp: null
  labels:
    io.kompose.service: web
  name: web
spec:
  type: LoadBalancer
  ports:
    - name: "8000"
      port: 8000
      targetPort: 8000
      rotocol: TCP
  selector:
    io.kompose.service: web
  externalIPs: #集群内互访
    - 10.0.8.10
    - 10.43.207.93
status:
  loadBalancer: {}

步骤4：Django web应用的settings中需要预留环境变量栏位

# 只是引用，但是没有使用
REDISPASSWORD = os.environ.get('REDISPASSWORD',"redis654321")