문제 7: Secret + LivenessProbe

다음 조건을 만족하는 Deployment YAML을 작성하시오:

• 이름: secure-deploy
• 라벨: app=secure
• 레플리카: 1
• 컨테이너:
  • 이름: secure-container
  • 이미지: busybox
  • 명령어: ["sh", "-c", "sleep 3600"]
  • 환경변수 USERNAME, PASSWORD는 Secret my-secret에서 가져올 것

나의 답변

apiVersion: apps/v1
kind: Deployment
metadata:
  name: secure-deploy
spec:
  replicas: 1
  selector:
    matchLabels:
      app: secure
  template:
    metadata:
      labels:
        app: secure
    spec:
      containers:
      - name: secure-container
        image: busybox
        command: ["sh", "-c", "sleep 3600"]
        env:
        - name: USERNAME
          valueFrom:
            secret:
              secretName: my-secret
        - name: PASSWORD
          valueFrom:
            secret:
              secretName: my-secret
        livenessProbe:
          exec:
            command: ["echo", "ok"]
          initialDelaySeconds: 5
          periodSeconds: 10

valueFrom.secret은 없고, secretKeyRef를 써야 한다"

정답

apiVersion: apps/v1
kind: Deployment
metadata:
  name: secure-deploy
spec:
  replicas: 1
  selector:
    matchLabels:
      app: secure
  template:
    metadata:
      labels:
        app: secure
    spec:
      containers:
      - name: secure-container
        image: busybox
        command: ["sh", "-c", "sleep 3600"]
        env:
        - name: USERNAME
          valueFrom:
            secretKeyRef:
              name: my-secret
              key: USERNAME
        - name: PASSWORD
          valueFrom:
            secretKeyRef:
              name: my-secret
              key: PASSWORD
        livenessProbe:
          exec:
            command: ["echo", "ok"]
          initialDelaySeconds: 5
          periodSeconds: 10