k8s作业7

Q1：创建一个secret，并创建2个pod， pod1挂载该secret，路径为/secret， pod2使用环境变量引用该secret，该变量的环境变量名为ABC

• secret名称： my-secret
• pod1名称： pod-volume-secret
• pod2名称： pod-env-secret

A1：secret-test.yaml

apiVersion: v1
kind: Secret
metadata:
  name: my-secret
type: Opaque
data:
  abc: a2hiCg== 

---
apiVersion: v1
kind: Pod
metadata:
  name: pod-volume-secret
spec:
  containers:
  - name: pod1
    image: nginx
    volumeMounts:
    - name: foo
      mountPath: "/secret"
      readOnly: true
  volumes:
  - name: foo
    secret:
      secretName: my-secret

---
apiVersion: v1
kind: Pod
metadata:
  name: pod-env-secret
spec:
  containers:
    - name: pod2
      image: nginx
      env:
        - name: ABC
          valueFrom:
            secretKeyRef:
              name: my-secret
              key: abc

kubectl get secret,pods