2 ms·
Embedding secrets (which should be changeable and with limited access) into container images (which should be reproducible and perhaps stored in accessible loca
by PeterisP 6y ago
Embedding secrets (which should be changeable and with limited access) into container images (which should be reproducible and perhaps stored in accessible locations) sounds like not a goood idea; IMHO you definitely need the capability to have the same container use different credentials so that, for example, you can run the same container in a development or testing environment as in production, but with different credentials.
- bopbeepboop 6y agoI believe they meant mounting via Kubectrl as a file, from the secret manager. So runtime file injection.
- yrro 6y agoI'm talking about doing this: https://kubernetes.io/docs/concepts/configuration/secret/#using-secrets-as-files-from-a-pod https://kubernetes.io/docs/concepts/configuration/secret/#us...