kubernetes-learn/sealed_secrets/k8s/kube.yaml
2025-04-15 12:25:09 +02:00

73 lines
2.9 KiB
YAML

apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
name: sealed-test-secret
namespace: default
spec:
encryptedData:
MY_KEY: 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
MY_KEY2: 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
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: sealed-test-deployment
labels:
app: sealed-test
spec:
replicas: 2
selector:
matchLabels:
app: sealed-test
template:
metadata:
labels:
app: sealed-test
spec:
containers:
- name: env-display
image: radeklos/env:latest # Unmaintained image, DON'T USE IT IN PRODUCTION. Just for testing.
ports:
- containerPort: 80
envFrom:
- secretRef:
name: sealed-test-secret
resources:
requests:
memory: "32Mi"
cpu: 128m
limits:
memory: "64Mi"
cpu: 256m
---
apiVersion: v1
kind: Service
metadata:
name: sealed-test-service
spec:
type: ClusterIP
selector:
app: sealed-test
ports:
- protocol: TCP
port: 8000
targetPort: 5000
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: sealed-test-ingress
annotations:
nginx.ingress.kubernetes.io/rewrite-target: /
spec:
ingressClassName: nginx
rules:
- http:
paths:
- path: /sealed-test
pathType: Prefix
backend:
service:
name: sealed-test-service
port:
number: 8000