Hands-On Microservices with Kubernetes

Removing mutual authentication between services

As you may recall, in Chapter 6, Securing Microservices on Kubernetes, we created a mutual secret between the link-manager service and the social-graph-manager service:

$ kubectl get secret | grep mutuallink-mutual-auth             Opaque          1      9d social-graph-mutual-auth    Opaque          1      5d19h

It required a lot of coordination and explicit work to encode the secrets, and then mount the secrets into the containers:

    spec:       containers:       - name: link-manager         image: g1g1/delinkcious-link:0.3         imagePullPolicy: Always         ports:         - containerPort: 8080         envFrom:         - configMapRef:             name: link-manager-config         volumeMounts:         - name: mutual-auth           mountPath: /etc/delinkcious           readOnly: true       volumes:       - name: mutual-auth         secret: secretName: link-mutual-auth ...