Distribute Credentials Securely Using Secrets

• https://kubernetes.io/docs/tasks/inject-data-application/distribute-credentials-secure/

apiVersion: v1
kind: Pod
metadata:
  name: secret-test-pod
spec:
  containers:
    - name: test-container
      image: nginx
      volumeMounts:
        # name must match the volume name below
        - name: secret-volume
          mountPath: /etc/secret-volume
          readOnly: true
  # The secret data is exposed to Containers in the Pod through a Volume.
  volumes:
    - name: secret-volume
      secret:
        secretName: test-secret 

See also

• Kubernetes secrets: types, kubectl [ get | create | describe | delete | secret ] secrets, secret.yml, kind: Secret, secretKeyRef, default-token, imagePullSecrets:, kubernetes.io/dockerconfigjson, External Secrets Operator ( kind: ExternalSecret), Kubeseal