-
Notifications
You must be signed in to change notification settings - Fork 0
/
nginx-pod.yaml
43 lines (43 loc) · 1.06 KB
/
nginx-pod.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
apiVersion: v1
kind: Pod
metadata:
creationTimestamp: null
labels:
run: nginx
name: nginx
namespace: default
spec:
serviceAccountName: nginx-deployment-sa # Must run as SA with access policy
containers:
- image: nginx
name: nginx
volumeMounts:
# Filename will be objectName or objectAlias if defined.
- name: secrets-store-inline
mountPath: "/secrets-store"
readOnly: true
env:
# Mount username as env variable
- name: MYUSERNAME
valueFrom:
secretKeyRef:
name: "myusername"
key: username
# Mount entire content of secret in to env variable
- name: MY_SECRET
valueFrom:
secretKeyRef:
name: "myk8ssecret"
key: "mysecret"
resources: {}
dnsPolicy: ClusterFirst
restartPolicy: Always
volumes:
# Create a volume from the secret
- name: secrets-store-inline
csi:
driver: secrets-store.csi.k8s.io
readOnly: true
volumeAttributes:
secretProviderClass: "aws-secret-to-k8s-secret"
status: {}