Hands-On Microservices with Kubernetes

Building a secure pod

The pod has a custom service that doesn't need to talk to the API server (so there's no need to auto-mount a service account token); instead, the pod offers imagePullSecret to pull our private repository and also has some generic secrets mounted as a file.

Let's get started and learn how to build a secure pod:

1. The first step is the custom service account. Here is the YAML manifest:

apiVersion: v1kind: ServiceAccountmetadata:  name: service-accountautomountServiceAccountToken: false

Let's create it:

$ kubectl create -f service-account.yamlserviceaccount "service-account" created

2. Now, we'll attach it to our pod and also set the imagePullSecret we created earlier. There's a lot going on here. I attached a custom service ...