使用 ConfigMap 挂载配置文件
使用?ConfigMap?掛載配置文件
Intro
有一些敏感信息比如數(shù)據(jù)庫(kù)連接字符串之類的出于安全考慮，這些敏感信息保存在了 AzureKeyVault 中，最近應(yīng)用上了 k8s 部署，所以想把 AzureKeyVault 的信息遷移到 ConfigMap，不再依賴 AzureKeyVault。
ConfigMap
新建一個(gè) ConfigMap，你可以從文件創(chuàng)建，如何創(chuàng)建ConfigMap 可以參考官方文檔，也可以直接手動(dòng)編輯，這里用的 ConfigMap 如下所示：
apiVersion: v1 kind: ConfigMap metadata: name: reservation-configs namespace: default data: appsettings: | { "ConnectionStrings": { "Redis": "redis-server", "Reservation": "Server=localhost;uid=liweihan;pwd=**;database=Reservation", "ElasticSearch": "elasticsearch" }, "MpWechat":{ "AppId": "wx4a41d3773ae55543", "AppSecret": "**********", "Token": "AmazingDotNet", "AESKey": "------------" }, "AppSettings": { "WechatSubscribeReply": "", "SentryClientKey": "https://**" }, "Tencent": { "Captcha": { "AppId": "2062135016", "AppSecret": "****" } }, "GoogleRecaptcha": { "SiteKey": "6Lc-**", "Secret": "6Lc-**" }, "Logging": { "LogLevel": { "Default": "Warning", "ActivityReservation": "Debug", "RequestLog": "Debug" } } }掛載 ConfigMap 中的配置文件到 Pod
Deployment 定義如下所示， 這里直接把上面定義的 appsettings 直接掛載為應(yīng)用程序的根目錄下 appsettings.json 文件
apiVersion: apps/v1
kind: Deployment
metadata:
name: activityreservation
namespace: default
labels:
app: activityreservation
spec:
replicas: 2
revisionHistoryLimit: 2 # how many old ReplicaSets for this Deployment you want to retain, https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#clean-up-policy
selector:
matchLabels:
app: activityreservation
minReadySeconds: 0
strategy:
type: RollingUpdate
rollingUpdate:
maxUnavailable: 1
maxSurge: 1
template:
metadata:
labels:
app: activityreservation
spec:
dnsConfig:
options:
- name: ndots
value: "1"
containers:
- name: activityreservation
image: weihanli/activityreservation:20190529.2
imagePullPolicy: IfNotPresent
resources:
limits:
memory: "256Mi"
cpu: "300m"
readinessProbe:
tcpSocket:
port: 80
initialDelaySeconds: 60
periodSeconds: 30
livenessProbe:
httpGet:
path: /Health
port: 80
initialDelaySeconds: 60
periodSeconds: 60
ports:
- containerPort: 80
volumeMounts:
- name: settings
mountPath: /app/appsettings.json
subPath: appsettings
volumes:
- name: settings
configMap:
name: reservation-configs
測(cè)試
1. 部署?ConfigMap
kubectl apply -f ConfigMap.yaml
2. 部署?deployment
kubectl apply -f reservation-deployment.yaml
3. 等待 pod 啟動(dòng)之后，查看 appsettings.json 文件內(nèi)容是否成功被替換掉
獲取對(duì)應(yīng)的 pod 名稱，然后通過(guò) kubectlexec<pod-name>cat/app/appsettings.json 來(lái)獲取pod中 appsettings.json 文件的內(nèi)容
出現(xiàn) ConnectionStrings 就證明文件被替換掉了，原始的配置文件里是沒(méi)有 ConnectionStrings 節(jié)點(diǎn)的，原始的方式是通過(guò)從 AzureKeyVault 中加載的
Reference
https://kubernetes.io/docs/tasks/configure-pod-container/configure-pod-configmap/#understanding-configmaps-and-pods
https://github.com/WeihanLi/ActivityReservation
總結(jié)
以上是生活随笔為你收集整理的使用 ConfigMap 挂载配置文件的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問(wèn)題。
- 上一篇： 开源/免费界面自动化测试工具对比研究
- 下一篇： SciSharpCube：容器中的Sci