Kubernetes dedica dos primitivas a definir datos de configuración: el ConfigMap y el Secret. Ambas primitivas están completamente desacopladas del ciclo de vida de un pod, lo que te permite cambiar los valores de sus datos de configuración sin tener que volver a implementar el pod.
En esencia, los ConfigMaps y los Secrets almacenan un conjunto de pares clave-valor. Esos pares clave-valor pueden inyectarse en un contenedor como variables de entorno, o pueden montarse como un volumen. La figura 10-1 ilustra estas opciones.
Figura 10-1. Consumo de datos de configuración
ConfigMap y Secret pueden parecer casi idénticos en cuanto a su finalidad y estructura a simple vista; sin embargo, hay una diferencia leve pero significativa. Un ConfigMap almacena datos de texto sin formato, por ejemplo, URL de conexión, indicadores de tiempo de ejecución o incluso datos estructurados como contenido JSON o YAML. Los secretos son más adecuados para representar datos confidenciales como contraseñas, claves API o certificados de capa de sockets seguros (SSL) y almacenan los datos en formato codificado Base64.
Cifrado de datos de ConfigMap y Secret
El componente del clúster que almacena los datos de un objeto ConfigMap y Secret es etcd, que gestiona ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month, and much more.
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
