{"id":92042,"date":"2026-08-09T01:40:52","date_gmt":"2026-08-08T17:40:52","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/92042.html"},"modified":"2026-08-09T01:40:52","modified_gmt":"2026-08-08T17:40:52","slug":"k8s-%e9%85%8d%e7%bd%ae%e7%ae%a1%e7%90%86%e5%ae%9e%e6%88%98%ef%bc%9aconfigmap-%e4%b8%8e-secret-%e5%ae%8c%e6%95%b4%e4%bd%bf%e7%94%a8%e6%8c%87%e5%8d%97","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/92042.html","title":{"rendered":"K8s \u914d\u7f6e\u7ba1\u7406\u5b9e\u6218\uff1aConfigMap \u4e0e Secret \u5b8c\u6574\u4f7f\u7528\u6307\u5357"},"content":{"rendered":"<\/p>\n<h4>K8s \u914d\u7f6e\u7ba1\u7406\u5b9e\u6218&#xff1a;ConfigMap \u4e0e Secret \u5b8c\u6574\u4f7f\u7528\u6307\u5357<\/h4>\n<ul>\n<li>Kubernetes Configure<\/li>\n<li>\n<ul>\n<li>\u73af\u5883\u51c6\u5907<\/li>\n<li>ConfigMap<\/li>\n<li>\n<ul>\n<li>ConfigMap \u4ecb\u7ecd<\/li>\n<li>ConfigMap \u521b\u5efa<\/li>\n<li>\n<ul>\n<li>\u952e\u503c\u5bf9\u7c7b\u578b<\/li>\n<li>\u6587\u4ef6\u7c7b\u578b<\/li>\n<li>\u76ee\u5f55\u7c7b\u578b<\/li>\n<\/ul>\n<\/li>\n<li>ConfigMap \u5f15\u7528<\/li>\n<li>\n<ul>\n<li>\u73af\u5883\u53d8\u91cf\u65b9\u5f0f\u5f15\u7528<\/li>\n<li>\u4ee5 volume \u65b9\u5f0f\u5f15\u7528<\/li>\n<li>\n<ul>\n<li>\u5f15\u7528\u6574\u4f53<\/li>\n<li>\u5f15\u7528\u7279\u5b9akey<\/li>\n<\/ul>\n<\/li>\n<li>k8s \u4e2d ConfigMap<\/li>\n<\/ul>\n<\/li>\n<li>\u7efc\u5408\u6848\u4f8b&#xff1a;haproxy&#043;web<\/li>\n<\/ul>\n<\/li>\n<li>Secret<\/li>\n<li>\n<ul>\n<li>Secret \u4ecb\u7ecd<\/li>\n<li>Secret \u7c7b\u578b<\/li>\n<li>Secret \u521b\u5efa<\/li>\n<li>\n<ul>\n<li>generic<\/li>\n<li>\n<ul>\n<li>\u57fa\u4e8e\u952e\u503c\u5bf9<\/li>\n<li>\u57fa\u4e8e\u666e\u901a\u6587\u4ef6<\/li>\n<li>\u57fa\u4e8e\u952e\u503c\u5bf9\u5185\u5bb9\u7684\u6587\u4ef6<\/li>\n<li>\u57fa\u4e8e\u76ee\u5f55<\/li>\n<li>\u57fa\u4e8e yaml \u6587\u4ef6<\/li>\n<\/ul>\n<\/li>\n<li>docker-registry<\/li>\n<li>TLS<\/li>\n<\/ul>\n<\/li>\n<li>Secret \u5f15\u7528<\/li>\n<li>\n<ul>\n<li>\u4ee5\u73af\u5883\u53d8\u91cf\u65b9\u5f0f\u5f15\u7528<\/li>\n<li>\u4ee5 volume \u65b9\u5f0f\u5f15\u7528<\/li>\n<li>\n<ul>\n<li>\u5f15\u7528\u6574\u4f53<\/li>\n<li>\u5f15\u7528\u7279\u5b9a key<\/li>\n<\/ul>\n<\/li>\n<li>\u6587\u4ef6\u6743\u9650<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<li>\u73af\u5883\u6e05\u7406<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2>Kubernetes Configure<\/h2>\n<p>\u6458\u8981&#xff1a;\u672c\u6587\u8be6\u7ec6\u4ecb\u7ecd\u4e86 Kubernetes \u4e2d ConfigMap \u548c Secret \u4e24\u79cd\u914d\u7f6e\u7ba1\u7406\u5bf9\u8c61\u7684\u4f7f\u7528\u65b9\u6cd5\u3002ConfigMap \u7528\u4e8e\u5b58\u50a8\u975e\u654f\u611f\u914d\u7f6e\u6570\u636e&#xff0c;\u652f\u6301\u952e\u503c\u5bf9\u3001\u6587\u4ef6\u548c\u76ee\u5f55\u4e09\u79cd\u521b\u5efa\u65b9\u5f0f&#xff0c;\u53ef\u901a\u8fc7\u73af\u5883\u53d8\u91cf\u6216 Volume \u6302\u8f7d\u5230 Pod \u4e2d\u3002Secret \u4e13\u95e8\u5b58\u50a8\u654f\u611f\u4fe1\u606f&#xff08;\u5982\u5bc6\u7801\u3001\u5bc6\u94a5&#xff09;&#xff0c;\u6570\u636e\u7ecf\u8fc7 Base64 \u7f16\u7801&#xff0c;\u652f\u6301 generic\u3001docker-registry \u548c TLS \u4e09\u79cd\u7c7b\u578b&#xff0c;\u540c\u6837\u652f\u6301\u73af\u5883\u53d8\u91cf\u548c Volume \u6302\u8f7d\u3002\u6587\u7ae0\u901a\u8fc7\u591a\u4e2a\u5b9e\u9645\u6848\u4f8b\u6f14\u793a\u4e86\u5982\u4f55\u521b\u5efa\u3001\u5f15\u7528\u548c\u66f4\u65b0\u8fd9\u4e9b\u914d\u7f6e\u5bf9\u8c61&#xff0c;\u5e76\u63d0\u4f9b\u4e86\u4e00\u4e2a\u7efc\u5408\u6848\u4f8b\u5c55\u793a\u5982\u4f55\u7ed3\u5408 haproxy \u548c nginx \u6784\u5efa\u8d1f\u8f7d\u5747\u8861\u5e94\u7528\u3002<\/p>\n<h3>\u73af\u5883\u51c6\u5907<\/h3>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl create ns configure<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl config set-context &#8211;current &#8211;namespace configure<\/span><\/p>\n<h3>ConfigMap<\/h3>\n<p>\u5b66\u4e60\u53c2\u8003&#xff1a;ConfigMap<\/p>\n<h4>ConfigMap \u4ecb\u7ecd<\/h4>\n<p>ConfigMap \u662f\u4e00\u4e2a\u5b58\u50a8\u5176\u4ed6\u5bf9\u8c61\u6240\u9700\u8981\u4f7f\u7528\u7684\u914d\u7f6e\u7684 API \u5bf9\u8c61\u3002 ConfigMap \u4f7f\u7528 data \u548c binaryData \u5b57\u6bb5&#xff0c;\u4fdd\u5b58\u952e\u503c\u5bf9\u6570\u636e\u3002<\/p>\n<ul>\n<li>data \u5b57\u6bb5&#xff0c;\u7528\u6765\u4fdd\u5b58 UTF-8 \u5b57\u7b26\u4e32\u3002<\/li>\n<li>binaryData \u5b57\u6bb5&#xff0c;\u7528\u6765\u4fdd\u5b58\u4e8c\u8fdb\u5236\u6570\u636e(base64 \u7f16\u7801\u7684\u5b57\u4e32) \u3002<\/li>\n<\/ul>\n<p>ConfigMap \u7684\u540d\u5b57\u5fc5\u987b\u662f\u4e00\u4e2a\u5408\u6cd5\u7684 DNS \u5b50\u57df\u540d\u3002data \u6216 binaryData \u5b57\u6bb5\u4e0b\u9762\u7684\u6bcf\u4e2a\u952e\u7684\u540d\u79f0\u90fd\u5fc5\u987b\u7531\u5b57\u6bcd\u3001\u6570\u5b57\u6216\u8005 -\u3001_ \u6216 . \u7ec4\u6210\u3002\u5728 data \u4e0b\u4fdd\u5b58\u7684\u952e\u540d\u4e0d\u53ef\u4ee5\u4e0e\u5728 binaryData \u4e0b\u51fa\u73b0\u7684\u952e\u540d\u6709\u91cd\u53e0\u3002<\/p>\n<p>\u4ece v1.19 \u5f00\u59cb&#xff0c;\u4f60\u53ef\u4ee5\u6dfb\u52a0\u4e00\u4e2a immutable \u5b57\u6bb5\u5230 ConfigMap \u5b9a\u4e49\u4e2d&#xff0c; \u521b\u5efa\u4e0d\u53ef\u53d8\u66f4\u7684 ConfigMap\u3002<\/p>\n<p>ConfigMap \u4f7f\u7528\u5efa\u8bae<\/p>\n<ul>\n<li>\n<p>\u4f7f\u7528 ConfigMap \u5b58\u50a8\u914d\u7f6e\u6570\u636e&#xff0c;\u4e0d\u5b58\u6570\u636e \/ \u6587\u4ef6&#xff0c;\u4e0a\u9650 &#061; 1 MiB\u3002<\/p>\n<\/li>\n<li>\n<p>**ConfigMap \u5728\u8bbe\u8ba1\u4e0a\u4e0d\u662f\u7528\u6765\u4fdd\u5b58\u5927\u91cf\u6570\u636e\u7684\u3002**\u5982\u679c\u4f60\u9700\u8981\u4fdd\u5b58\u5927\u91cf\u6570\u636e&#xff0c;\u8003\u8651\u4f7f\u7528\u6302\u8f7d\u5b58\u50a8\u5377\u6216\u8005\u4f7f\u7528\u72ec\u7acb\u7684\u6570\u636e\u5e93\u6216\u8005\u6587\u4ef6\u670d\u52a1\u3002<\/p>\n<\/li>\n<\/ul>\n<h4>ConfigMap \u521b\u5efa<\/h4>\n<p>\u4f7f\u7528\u5e2e\u52a9<\/p>\n<p>kubectl create configmap NAME <span class=\"token punctuation\">[<\/span>&#8211;from-file<span class=\"token operator\">&#061;<\/span><span class=\"token punctuation\">[<\/span>key<span class=\"token operator\">&#061;<\/span><span class=\"token punctuation\">]<\/span>source<span class=\"token punctuation\">]<\/span><br \/>\n<span class=\"token punctuation\">[<\/span>&#8211;from-literal<span class=\"token operator\">&#061;<\/span>key1<span class=\"token operator\">&#061;<\/span>value1<span class=\"token punctuation\">]<\/span> <span class=\"token punctuation\">[<\/span>&#8211;dry-run<span class=\"token operator\">&#061;<\/span>server<span class=\"token operator\">|<\/span>client<span class=\"token operator\">|<\/span>none<span class=\"token punctuation\">]<\/span> <span class=\"token punctuation\">[<\/span>options<span class=\"token punctuation\">]<\/span><\/p>\n<h5>\u952e\u503c\u5bf9\u7c7b\u578b<\/h5>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl create configmap mysql &#8211;from-literal&#061;password&#061;redhat <\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl get configmaps mysql -o yaml |grep ^data -A1<\/span><br \/>\ndata:<br \/>\n  password: redhat<\/p>\n<h5>\u6587\u4ef6\u7c7b\u578b<\/h5>\n<p>root&#064;master30:~<span class=\"token comment\"># echo Hello World &gt; index.html <\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl create configmap web1 &#8211;from-file&#061;.\/index.html<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl get configmaps web1 -o yaml |grep ^data -A2<\/span><br \/>\ndata:<br \/>\n  index.html: <span class=\"token operator\">|<\/span><br \/>\n    Hello World<\/p>\n<h5>\u76ee\u5f55\u7c7b\u578b<\/h5>\n<p>root&#064;master30:~<span class=\"token comment\"># echo error &gt; error.html<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># mkdir web2<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># mv index.html error.html web2<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl create configmap web2 &#8211;from-file&#061;.\/web2<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl get configmaps web2 -o yaml |grep ^data -A4<\/span><br \/>\ndata:<br \/>\n  error.html: <span class=\"token operator\">|<\/span><br \/>\n    error<br \/>\n  index.html: <span class=\"token operator\">|<\/span><br \/>\n    Hello World<\/p>\n<h4>ConfigMap \u5f15\u7528<\/h4>\n<h5>\u73af\u5883\u53d8\u91cf\u65b9\u5f0f\u5f15\u7528<\/h5>\n<p>**\u6ce8\u610f&#xff1a;**\u73af\u5883\u53d8\u91cf\u5c5e\u4e8e\u7279\u5b9a\u5bb9\u5668\u7ea7\u522b\u3002<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># vim pod-with-env-from-configmap.yaml<\/span><\/p>\n<p><span class=\"token punctuation\">&#8212;<\/span><br \/>\n<span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Pod<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> mysql<br \/>\n  <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> mysql<br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">containers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> hub.laoma.cloud\/library\/mysql<span class=\"token punctuation\">:<\/span>latest<br \/>\n    <span class=\"token key atrule\">imagePullPolicy<\/span><span class=\"token punctuation\">:<\/span> IfNotPresent<br \/>\n    <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> mysql<br \/>\n    <span class=\"token key atrule\">ports<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">containerPort<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">3306<\/span><br \/>\n      <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> mysql<br \/>\n    <span class=\"token key atrule\">env<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> MYSQL_ROOT_PASSWORD<br \/>\n      <span class=\"token comment\"># \u539f\u5148\u901a\u8fc7value\u8bbe\u7f6e\u73af\u5883\u53d8\u91cf\u503c<\/span><br \/>\n      <span class=\"token key atrule\">valueFrom<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token key atrule\">configMapKeyRef<\/span><span class=\"token punctuation\">:<\/span><br \/>\n          <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> mysql<br \/>\n          <span class=\"token key atrule\">key<\/span><span class=\"token punctuation\">:<\/span> password<\/p>\n<p>\u9a8c\u8bc1<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl apply -f pod-with-env-from-configmap.yaml<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl get pods -o wide<\/span><br \/>\nNAME    READY   STATUS    RESTARTS   AGE     IP              NODE                  NOMINATED NODE   READINESS GATES<br \/>\nmysql   <span class=\"token number\">1<\/span>\/1     Running   <span class=\"token number\">0<\/span>          4m33s   <span class=\"token number\">10.224<\/span>.193.70   worker32.laoma.cloud   <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span><\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl exec -it mysql &#8212; bash -c &#039;echo $MYSQL_ROOT_PASSWORD&#039;<\/span><br \/>\nredhat<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># apt install -y mysql-client<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># mysql -u root -predhat -h 10.224.193.70<\/span><br \/>\nmysql: <span class=\"token punctuation\">[<\/span>Warning<span class=\"token punctuation\">]<\/span> Using a password on the <span class=\"token builtin class-name\">command<\/span> line interface can be insecure.<br \/>\n<span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><\/p>\n<p>Type <span class=\"token string\">&#039;help;&#039;<\/span> or <span class=\"token string\">&#039;\\\\h&#039;<\/span> <span class=\"token keyword\">for<\/span> help. Type <span class=\"token string\">&#039;\\\\c&#039;<\/span> to <span class=\"token function\">clear<\/span> the current input statement.<\/p>\n<p>mysql<span class=\"token operator\">&gt;<\/span> quit<br \/>\nBye<\/p>\n<p><span class=\"token comment\"># \u5220\u9664 pod<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl delete pod mysql &#8211;force<\/span><\/p>\n<h5>\u4ee5 volume \u65b9\u5f0f\u5f15\u7528<\/h5>\n<p>**\u6ce8\u610f&#xff1a;**volumes\u5c5e\u4e8epod\u7ea7\u522b&#xff0c;\u901a\u8fc7volumeMounts\u6302\u8f7d\u3002<\/p>\n<h6>\u5f15\u7528\u6574\u4f53<\/h6>\n<p>root&#064;master30:~<span class=\"token comment\"># vim pod-with-volume-from-configmap.yaml<\/span><\/p>\n<p><span class=\"token punctuation\">&#8212;<\/span><br \/>\n<span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Pod<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">containers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> hub.laoma.cloud\/library\/nginx<span class=\"token punctuation\">:<\/span>latest<br \/>\n    <span class=\"token key atrule\">imagePullPolicy<\/span><span class=\"token punctuation\">:<\/span> IfNotPresent<br \/>\n    <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n    <span class=\"token key atrule\">volumeMounts<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webcontent<br \/>\n      <span class=\"token comment\"># mountPath\u503c\u662f\u4e00\u4e2a\u6302\u8f7d\u70b9&#xff0c;\u5c06configuremap\u4e2d\u6240\u6709\u952e\u503c\u5bf9\u6302\u8f7d\u8fc7\u6765<\/span><br \/>\n      <span class=\"token key atrule\">mountPath<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;\/usr\/share\/nginx\/html&#034;<\/span><br \/>\n  <span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webcontent<br \/>\n    <span class=\"token key atrule\">configMap<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web2<\/p>\n<p>\u9a8c\u8bc1<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl apply -f pod-with-volume-from-configmap.yaml<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl get pods -o wide<\/span><br \/>\nNAME   READY   STATUS    RESTARTS   AGE   IP              NODE                  NOMINATED NODE   READINESS GATES<br \/>\nweb    <span class=\"token number\">1<\/span>\/1     Running   <span class=\"token number\">0<\/span>          66s   <span class=\"token number\">10.224<\/span>.193.69   worker32.laoma.cloud   <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span>           <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span><\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl exec web &#8212; ls \/usr\/share\/nginx\/html<\/span><br \/>\nerror.html<br \/>\nindex.html<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># curl http:\/\/10.224.193.69<\/span><br \/>\nHello World<br \/>\nroot&#064;master30:~<span class=\"token comment\"># curl http:\/\/10.224.193.69\/error.html<\/span><br \/>\nerror<\/p>\n<h6>\u5f15\u7528\u7279\u5b9akey<\/h6>\n<p>root&#064;master30:~<span class=\"token comment\"># vim pod-cm-volume-single.yaml<\/span><\/p>\n<p><span class=\"token punctuation\">&#8212;<\/span><br \/>\n<span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Pod<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">containers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> hub.laoma.cloud\/library\/nginx<span class=\"token punctuation\">:<\/span>latest<br \/>\n    <span class=\"token key atrule\">imagePullPolicy<\/span><span class=\"token punctuation\">:<\/span> IfNotPresent<br \/>\n    <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n    <span class=\"token key atrule\">volumeMounts<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webcontent<br \/>\n      <span class=\"token key atrule\">mountPath<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;\/usr\/share\/nginx\/html&#034;<\/span><br \/>\n  <span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webcontent<br \/>\n    <span class=\"token key atrule\">configMap<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web2<br \/>\n      <span class=\"token key atrule\">items<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">key<\/span><span class=\"token punctuation\">:<\/span> index.html<br \/>\n          <span class=\"token key atrule\">path<\/span><span class=\"token punctuation\">:<\/span> index.html<\/p>\n<p>\u7b49\u540c\u4e8e<\/p>\n<p><span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Pod<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">containers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> hub.laoma.cloud\/library\/nginx<span class=\"token punctuation\">:<\/span>latest<br \/>\n    <span class=\"token key atrule\">imagePullPolicy<\/span><span class=\"token punctuation\">:<\/span> IfNotPresent<br \/>\n    <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n    <span class=\"token key atrule\">volumeMounts<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webcontent<br \/>\n      <span class=\"token key atrule\">mountPath<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;\/usr\/share\/nginx\/html\/index.html&#034;<\/span><br \/>\n      <span class=\"token key atrule\">subPath<\/span><span class=\"token punctuation\">:<\/span> index.html<br \/>\n  <span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webcontent<br \/>\n    <span class=\"token key atrule\">configMap<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web2<\/p>\n<p>**\u88ab\u6302\u8f7d\u7684 ConfigMap \u5185\u5bb9\u4f1a\u88ab\u81ea\u52a8\u66f4\u65b0\u3002**\u5f53\u5377\u4e2d\u4f7f\u7528\u7684 ConfigMap \u88ab\u66f4\u65b0\u65f6&#xff0c;\u6240\u6295\u5c04\u7684\u952e\u6700\u7ec8\u4e5f\u4f1a\u88ab\u66f4\u65b0\u3002 kubelet \u7ec4\u4ef6\u4f1a\u5728\u6bcf\u6b21\u5468\u671f\u6027\u540c\u6b65\u65f6\u68c0\u67e5\u6240\u6302\u8f7d\u7684 ConfigMap \u662f\u5426\u4e3a\u6700\u65b0\u3002<\/p>\n<h5>k8s \u4e2d ConfigMap<\/h5>\n<p>\u4ee5 kube-proxy \u4e3a\u4f8b<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl get configmaps -n kube-system <\/span><br \/>\nNAME                                                   DATA   AGE<br \/>\ncalico-config                                          <span class=\"token number\">4<\/span>      37h<br \/>\ncoredns                                                <span class=\"token number\">1<\/span>      37h<br \/>\nextension-apiserver-authentication                     <span class=\"token number\">6<\/span>      37h<br \/>\nkube-apiserver-legacy-service-account-token-tracking   <span class=\"token number\">1<\/span>      37h<br \/>\nkube-proxy                                             <span class=\"token number\">2<\/span>      37h<br \/>\nkube-root-ca.crt                                       <span class=\"token number\">1<\/span>      37h<br \/>\nkubeadm-config                                         <span class=\"token number\">1<\/span>      37h<br \/>\nkubelet-config                                         <span class=\"token number\">1<\/span>      37h<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl get configmaps kube-proxy -n kube-system  -o yaml<\/span><br \/>\napiVersion: v1<br \/>\ndata:<br \/>\n  config.conf: <span class=\"token operator\">|<\/span>&#8211;<br \/>\n    apiVersion: kubeproxy.config.k8s.io\/v1alpha1<br \/>\n    bindAddress: <span class=\"token number\">0.0<\/span>.0.0<br \/>\n    bindAddressHardFail: <span class=\"token boolean\">false<\/span><br \/>\n    clientConnection:<br \/>\n      acceptContentTypes: <span class=\"token string\">&#034;&#034;<\/span><br \/>\n      burst: <span class=\"token number\">0<\/span><br \/>\n      contentType: <span class=\"token string\">&#034;&#034;<\/span><br \/>\n      kubeconfig: \/var\/lib\/kube-proxy\/kubeconfig.conf<br \/>\n      qps: <span class=\"token number\">0<\/span><br \/>\n    clusterCIDR: <span class=\"token number\">10.224<\/span>.0.0\/16<br \/>\n    configSyncPeriod: 0s<br \/>\n    conntrack:<br \/>\n      maxPerCore: null<br \/>\n      min: null<br \/>\n      tcpCloseWaitTimeout: null<br \/>\n      tcpEstablishedTimeout: null<br \/>\n    detectLocalMode: <span class=\"token string\">&#034;&#034;<\/span><br \/>\n    enableProfiling: <span class=\"token boolean\">false<\/span><br \/>\n    healthzBindAddress: <span class=\"token string\">&#034;&#034;<\/span><br \/>\n    hostnameOverride: <span class=\"token string\">&#034;&#034;<\/span><br \/>\n    iptables:<br \/>\n      masqueradeAll: <span class=\"token boolean\">false<\/span><br \/>\n      masqueradeBit: null<br \/>\n      minSyncPeriod: 0s<br \/>\n      syncPeriod: 0s<br \/>\n    ipvs:<br \/>\n      excludeCIDRs: null<br \/>\n      minSyncPeriod: 0s<br \/>\n      scheduler: <span class=\"token string\">&#034;&#034;<\/span><br \/>\n      strictARP: <span class=\"token boolean\">false<\/span><br \/>\n      syncPeriod: 0s<br \/>\n      tcpFinTimeout: 0s<br \/>\n      tcpTimeout: 0s<br \/>\n      udpTimeout: 0s<br \/>\n    kind: KubeProxyConfiguration<br \/>\n    metricsBindAddress: <span class=\"token string\">&#034;&#034;<\/span><br \/>\n    mode: <span class=\"token string\">&#034;&#034;<\/span><br \/>\n    nodePortAddresses: null<br \/>\n    oomScoreAdj: null<br \/>\n    portRange: <span class=\"token string\">&#034;&#034;<\/span><br \/>\n    showHiddenMetricsForVersion: <span class=\"token string\">&#034;&#034;<\/span><br \/>\n    udpIdleTimeout: 0s<br \/>\n    winkernel:<br \/>\n      enableDSR: <span class=\"token boolean\">false<\/span><br \/>\n      networkName: <span class=\"token string\">&#034;&#034;<\/span><br \/>\n      sourceVip: <span class=\"token string\">&#034;&#034;<\/span><br \/>\n  kubeconfig.conf: <span class=\"token operator\">|<\/span>&#8211;<br \/>\n    apiVersion: v1<br \/>\n    kind: Config<br \/>\n    clusters:<br \/>\n    &#8211; cluster:<br \/>\n        certificate-authority: \/var\/run\/secrets\/kubernetes.io\/serviceaccount\/ca.crt<br \/>\n        server: https:\/\/10.1.8.30:6443<br \/>\n      name: default<br \/>\n    contexts:<br \/>\n    &#8211; context:<br \/>\n        cluster: default<br \/>\n        namespace: default<br \/>\n        user: default<br \/>\n      name: default<br \/>\n    current-context: default<br \/>\n    users:<br \/>\n    &#8211; name: default<br \/>\n      user:<br \/>\n        tokenFile: \/var\/run\/secrets\/kubernetes.io\/serviceaccount\/token<br \/>\nkind: ConfigMap<br \/>\nmetadata:<br \/>\n  annotations:<br \/>\n    kubeadm.kubernetes.io\/component-config.hash: sha256:77333136e4f6883a76e786187738706eb9a60efd1f8641f2489dbd1e085726d9<br \/>\n  creationTimestamp: <span class=\"token string\">&#034;2021-07-03T03:07:55Z&#034;<\/span><br \/>\n  labels:<br \/>\n    app: kube-proxy<br \/>\n  managedFields:<br \/>\n  &#8211; apiVersion: v1<br \/>\n    fieldsType: FieldsV1<br \/>\n    fieldsV1:<br \/>\n      f:data:<br \/>\n        .: <span class=\"token punctuation\">{<\/span><span class=\"token punctuation\">}<\/span><br \/>\n        f:config.conf: <span class=\"token punctuation\">{<\/span><span class=\"token punctuation\">}<\/span><br \/>\n        f:kubeconfig.conf: <span class=\"token punctuation\">{<\/span><span class=\"token punctuation\">}<\/span><br \/>\n      f:metadata:<br \/>\n        f:annotations:<br \/>\n          .: <span class=\"token punctuation\">{<\/span><span class=\"token punctuation\">}<\/span><br \/>\n          f:kubeadm.kubernetes.io\/component-config.hash: <span class=\"token punctuation\">{<\/span><span class=\"token punctuation\">}<\/span><br \/>\n        f:labels:<br \/>\n          .: <span class=\"token punctuation\">{<\/span><span class=\"token punctuation\">}<\/span><br \/>\n          f:app: <span class=\"token punctuation\">{<\/span><span class=\"token punctuation\">}<\/span><br \/>\n    manager: kubeadm<br \/>\n    operation: Update<br \/>\n    time: <span class=\"token string\">&#034;2021-07-03T03:07:55Z&#034;<\/span><br \/>\n  name: kube-proxy<br \/>\n  namespace: kube-system<br \/>\n  resourceVersion: <span class=\"token string\">&#034;193&#034;<\/span><br \/>\n  selfLink: \/api\/v1\/namespaces\/kube-system\/configmaps\/kube-proxy<br \/>\n  uid: 2b6168fd-29c8-49c4-a465-08720e9f48db<\/p>\n<p><span class=\"token comment\"># kube-proxy\u6709\u4e24\u79cd\u5de5\u4f5c\u6a21\u5f0fipvs\u548ciptables<\/span><br \/>\n<span class=\"token comment\"># \u8fd9\u91cc mode \u503c\u4e3a\u7a7a&#xff0c;\u67e5\u770b\u65e5\u5fd7\u53d1\u73b0\u9ed8\u8ba4\u4f7f\u7528iptables\u3002<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl logs -n kube-system kube-proxy-8kp8w <\/span><br \/>\nI1019 02:26:00.975333       <span class=\"token number\">1<\/span> server_others.go:69<span class=\"token punctuation\">]<\/span> <span class=\"token string\">&#034;Using iptables proxy&#034;<\/span><br \/>\nI1019 02:26:01.037589       <span class=\"token number\">1<\/span> node.go:141<span class=\"token punctuation\">]<\/span> Successfully retrieved <span class=\"token function\">node<\/span> IP: <span class=\"token number\">10.1<\/span>.8.31<br \/>\nI1019 02:26:01.040909       <span class=\"token number\">1<\/span> conntrack.go:100<span class=\"token punctuation\">]<\/span> <span class=\"token string\">&#034;Set sysctl&#034;<\/span> <span class=\"token assign-left variable\">entry<\/span><span class=\"token operator\">&#061;<\/span><span class=\"token string\">&#034;net\/netfilter\/nf_conntrack_max&#034;<\/span> <span class=\"token assign-left variable\">value<\/span><span class=\"token operator\">&#061;<\/span><span class=\"token number\">131072<\/span><br \/>\nI1019 02:26:01.041412       <span class=\"token number\">1<\/span> conntrack.go:52<span class=\"token punctuation\">]<\/span> <span class=\"token string\">&#034;Setting nf_conntrack_max&#034;<\/span> <span class=\"token assign-left variable\">nfConntrackMax<\/span><span class=\"token operator\">&#061;<\/span><span class=\"token number\">131072<\/span><br \/>\nI1019 02:26:01.041902       <span class=\"token number\">1<\/span> conntrack.go:100<span class=\"token punctuation\">]<\/span> <span class=\"token string\">&#034;Set sysctl&#034;<\/span> <span class=\"token assign-left variable\">entry<\/span><span class=\"token operator\">&#061;<\/span><span class=\"token string\">&#034;net\/netfilter\/nf_conntrack_tcp_timeout_close_wait&#034;<\/span> <span class=\"token assign-left variable\">value<\/span><span class=\"token operator\">&#061;<\/span><span class=\"token number\">3600<\/span><br \/>\n<span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><\/p>\n<p><span class=\"token comment\"># \u66f4\u6539\u6a21\u5f0f\u4e3aipvs<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl edit cm -n kube-system kube-proxy <\/span><br \/>\n<span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><br \/>\n    mode: <span class=\"token string\">&#034;ipvs&#034;<\/span><br \/>\n<span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><\/p>\n<p><span class=\"token comment\"># \u5220\u9664pod&#xff0c;\u7b49\u5f85\u63a7\u5236\u5668\u91cd\u65b0\u521b\u5efa<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl get pod -n kube-system |grep kube-proxy<\/span><br \/>\nkube-proxy-8kp8w                            <span class=\"token number\">1<\/span>\/1     Running   <span class=\"token number\">1<\/span>          37d<br \/>\nkube-proxy-ghgxw                            <span class=\"token number\">1<\/span>\/1     Running   <span class=\"token number\">1<\/span>          37d<br \/>\nkube-proxy-p6qnk                            <span class=\"token number\">1<\/span>\/1     Running   <span class=\"token number\">1<\/span>          37d<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl delete pod -n kube-system kube-proxy-{8kp8w,ghgxw,p6qnk}<\/span><br \/>\npod <span class=\"token string\">&#034;kube-proxy-8kp8w&#034;<\/span> deleted<br \/>\npod <span class=\"token string\">&#034;kube-proxy-ghgxw&#034;<\/span> deleted<br \/>\npod <span class=\"token string\">&#034;kube-proxy-p6qnk&#034;<\/span> deleted<\/p>\n<p><span class=\"token comment\"># \u518d\u6b21\u67e5\u770b\u65e5\u5fd7<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl get pod -n kube-system |grep kube-proxy<\/span><br \/>\nkube-proxy-8swmx                            <span class=\"token number\">1<\/span>\/1     Running   <span class=\"token number\">0<\/span>          18s<br \/>\nkube-proxy-948cw                            <span class=\"token number\">1<\/span>\/1     Running   <span class=\"token number\">0<\/span>          29s<br \/>\nkube-proxy-xlh7b                            <span class=\"token number\">1<\/span>\/1     Running   <span class=\"token number\">0<\/span>          24s<br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl logs -n kube-system kube-proxy-8swmx<\/span><br \/>\nI1019 03:41:12.288952       <span class=\"token number\">1<\/span> node.go:141<span class=\"token punctuation\">]<\/span> Successfully retrieved <span class=\"token function\">node<\/span> IP: <span class=\"token number\">10.1<\/span>.8.31<br \/>\nI1019 03:41:12.290902       <span class=\"token number\">1<\/span> conntrack.go:52<span class=\"token punctuation\">]<\/span> <span class=\"token string\">&#034;Setting nf_conntrack_max&#034;<\/span> <span class=\"token assign-left variable\">nfConntrackMax<\/span><span class=\"token operator\">&#061;<\/span><span class=\"token number\">131072<\/span><br \/>\nI1019 03:41:12.325988       <span class=\"token number\">1<\/span> server.go:632<span class=\"token punctuation\">]<\/span> <span class=\"token string\">&#034;kube-proxy running in dual-stack mode&#034;<\/span> primary <span class=\"token assign-left variable\">ipFamily<\/span><span class=\"token operator\">&#061;<\/span><span class=\"token string\">&#034;IPv4&#034;<\/span><br \/>\nI1019 03:41:12.364416       <span class=\"token number\">1<\/span> server_others.go:218<span class=\"token punctuation\">]<\/span> <span class=\"token string\">&#034;Using ipvs Proxier&#034;<\/span><br \/>\n<span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><\/p>\n<p><span class=\"token comment\"># \u5b9e\u9a8c\u5b8c\u6210\u540e&#xff0c;\u6a21\u5f0f\u66f4\u6539\u56de\u6765<\/span><\/p>\n<h4>\u7efc\u5408\u6848\u4f8b&#xff1a;haproxy&#043;web<\/h4>\n<p>\u9700\u6c42&#xff1a;<\/p>\n<li>\u521b\u5efa\u4e00\u4e2a\u540d\u79f0\u4e3a haproxy \u7684pod&#xff0c;\u4f7f\u7528\u955c\u50cf haproxy&#xff0c;pod haproxy \u7684\u914d\u7f6e\u6587\u4ef6\u4fdd\u5b58\u5728 configmap \u4e2d&#xff0c;\u901a\u8fc7 volume \u65b9\u5f0f\u6302\u8f7d\u5230 \/usr\/local\/etc\/haproxy\/haproxy.cfg\u3002\u5c06\u6d41\u91cf\u8f6c\u53d1\u5230pod webapp-1 \u548c webapp-2\u3002<\/li>\n<p>haproxy \u7684\u914d\u7f6e\u6587\u4ef6\u6a21\u677f\u5185\u5bb9\u5982\u4e0b&#xff1a;<\/p>\n<p>global<br \/>\n    daemon<br \/>\n    maxconn 256<\/p>\n<p>defaults<br \/>\n    mode http<br \/>\n    timeout connect 5000ms<br \/>\n    timeout client 50000ms<br \/>\n    timeout server 50000ms<\/p>\n<p>frontend http-in<br \/>\n    bind *:8080<br \/>\n    default_backend servers<\/p>\n<p>backend servers<br \/>\n    server  app1 10.224.84.80:80 check<br \/>\n    server  app2 10.224.149.25:80 check<\/p>\n<li>\u521b\u5efa\u7b2c\u4e00\u4e2apod&#xff0c;\u540d\u79f0\u4e3awebapp-1&#xff0c;\u4f7f\u7528\u955c\u50cfnginx\u3002\u4e3a\u8be5pod\u521b\u5efa\u4e00\u4e2acm&#xff0c;\u540d\u79f0\u4e3awebapp-1&#xff0c;\u8be5cm\u4fdd\u5b58\u4e24\u4e2a\u503c&#xff1a;<\/li>\n<ul>\n<li>index.html&#061;\u201chello webapp-1\u201d<\/li>\n<li>error.html&#061;\u201csorry, error.\u201d<\/li>\n<\/ul>\n<p>\u8fd9\u4e2a\u4e24\u4e2a\u503c\u901a\u8fc7volume\u65b9\u5f0f\u6302\u8f7d\u5230**\/usr\/share\/nginx\/html**\u76ee\u5f55\u3002<\/p>\n<li>\u521b\u5efa\u7b2c\u4e8c\u4e2apod&#xff0c;\u540d\u79f0\u4e3awebapp-2&#xff0c;\u4f7f\u7528\u955c\u50cfnginx\u3002\u4e3a\u8be5pod\u521b\u5efa\u4e00\u4e2acm&#xff0c;\u540d\u79f0\u4e3awebapp-2&#xff0c;\u8be5cm\u4fdd\u5b58\u4e24\u4e2a\u503c&#xff1a;<\/li>\n<ul>\n<li>index.html&#061;\u201chello webapp-2\u201d<\/li>\n<li>error.html&#061;\u201csorry, error.\u201d<\/li>\n<\/ul>\n<p>\u8fd9\u4e2a\u4e24\u4e2a\u503c\u901a\u8fc7volume\u65b9\u5f0f\u6302\u8f7d\u5230**\/usr\/share\/nginx\/html**\u76ee\u5f55\u3002<\/p>\n<p>\u89e3\u7b54&#xff1a;<\/p>\n<li>\u521b\u5efa\u7b2c\u4e00\u4e2acm\u548cpod<\/li>\n<p>root&#064;master30:~<span class=\"token comment\"># mkdir web &amp;&amp; cd web<\/span><br \/>\nroot&#064;master30:~\/web<span class=\"token comment\"># kubectl create cm webapp-1 &#8211;from-literal&#061;index.html&#061;&#034;hello webapp-1&#034; &#8211;from-literal&#061;error.html&#061;&#034;sorry, error.&#034;<\/span><br \/>\nroot&#064;master30:~\/web<span class=\"token comment\"># vim pod-webapp-1.yaml<\/span><\/p>\n<p><span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Pod<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> webapp<span class=\"token punctuation\">&#8211;<\/span><span class=\"token number\">1<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webapp<span class=\"token punctuation\">&#8211;<\/span><span class=\"token number\">1<\/span><br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">containers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> nginx<br \/>\n    <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> hub.laoma.cloud\/library\/nginx<span class=\"token punctuation\">:<\/span>latest<br \/>\n    <span class=\"token key atrule\">imagePullPolicy<\/span><span class=\"token punctuation\">:<\/span> IfNotPresent<br \/>\n    <span class=\"token key atrule\">volumeMounts<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> config<br \/>\n      <span class=\"token key atrule\">mountPath<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;\/usr\/share\/nginx\/html&#034;<\/span><br \/>\n      <span class=\"token key atrule\">readOnly<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token boolean important\">true<\/span><br \/>\n  <span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> config<br \/>\n    <span class=\"token key atrule\">configMap<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webapp<span class=\"token punctuation\">&#8211;<\/span><span class=\"token number\">1<\/span><\/p>\n<p>root&#064;master30:~\/web<span class=\"token comment\"># kubectl apply -f pod-webapp-1.yaml<\/span><\/p>\n<li>\u521b\u5efa\u7b2c\u4e8c\u4e2acm\u548cpod<\/li>\n<p>root&#064;master30:~\/web<span class=\"token comment\"># kubectl create cm webapp-2 &#8211;from-literal&#061;index.html&#061;&#034;hello webapp-2&#034; &#8211;from-literal&#061;error.html&#061;&#034;sorry, error.&#034;<\/span><br \/>\nroot&#064;master30:~\/web<span class=\"token comment\"># vim pod-webapp-2.yaml<\/span><\/p>\n<p><span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Pod<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> webapp<span class=\"token punctuation\">&#8211;<\/span><span class=\"token number\">2<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webapp<span class=\"token punctuation\">&#8211;<\/span><span class=\"token number\">2<\/span><br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">containers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> nginx<br \/>\n    <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> hub.laoma.cloud\/library\/nginx<span class=\"token punctuation\">:<\/span>latest<br \/>\n    <span class=\"token key atrule\">imagePullPolicy<\/span><span class=\"token punctuation\">:<\/span> IfNotPresent<br \/>\n    <span class=\"token key atrule\">volumeMounts<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> config<br \/>\n      <span class=\"token key atrule\">mountPath<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;\/usr\/share\/nginx\/html&#034;<\/span><br \/>\n      <span class=\"token key atrule\">readOnly<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token boolean important\">true<\/span><br \/>\n  <span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> config<br \/>\n    <span class=\"token key atrule\">configMap<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webapp<span class=\"token punctuation\">&#8211;<\/span><span class=\"token number\">2<\/span><\/p>\n<p>root&#064;master30:~\/web<span class=\"token comment\"># kubectl apply -f pod-webapp-2.yaml<\/span><\/p>\n<li>\u521b\u5efahaproxy\u914d\u7f6e\u6587\u4ef6\u3002<\/li>\n<p><span class=\"token comment\"># \u83b7\u53d6pod ip\u5730\u5740<\/span><br \/>\nroot&#064;master30:~\/web<span class=\"token comment\"># kubectl get pods -o wide<\/span><br \/>\nNAME   READY   STATUS    RESTARTS   AGE   IP              NODE                NOMINATED NODE   READINESS GATES<br \/>\nwebapp-1   <span class=\"token number\">1<\/span>\/1     Running   <span class=\"token number\">0<\/span>          63m   <span class=\"token number\">10.224<\/span>.84.80    worker1.laoma.fun   <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span>           <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span><br \/>\nwebapp-2   <span class=\"token number\">1<\/span>\/1     Running   <span class=\"token number\">0<\/span>          63m   <span class=\"token number\">10.224<\/span>.149.25   worker2.laoma.fun   <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span>           <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span><\/p>\n<p><span class=\"token comment\"># haproxy\u5185\u5bb9\u5982\u4e0b&#xff1a;<\/span><br \/>\nroot&#064;master30:~\/web<span class=\"token comment\"># vim haproxy.cfg<\/span><\/p>\n<p>global<br \/>\n    daemon<br \/>\n    maxconn 256<\/p>\n<p>defaults<br \/>\n    mode http<br \/>\n    timeout connect 5000ms<br \/>\n    timeout client 50000ms<br \/>\n    timeout server 50000ms<\/p>\n<p>frontend http-in<br \/>\n    bind *:8080<br \/>\n    default_backend servers<\/p>\n<p>backend servers<br \/>\n    server  app1 10.224.84.80:80 check<br \/>\n    server  app2 10.224.149.25:80 check<\/p>\n<p><span class=\"token comment\"># \u521b\u5efahaproxy.cfg configmap<\/span><br \/>\nroot&#064;master30:~\/web<span class=\"token comment\"># kubectl create cm haproxy.cfg &#8211;from-file&#061;haproxy.cfg&#061;.\/haproxy.cfg<\/span><\/p>\n<p><span class=\"token comment\"># \u521b\u5efapod haproxy<\/span><br \/>\nroot&#064;master30:~\/web<span class=\"token comment\"># vim haproxy.yaml<\/span><\/p>\n<p><span class=\"token punctuation\">&#8212;<\/span><br \/>\n<span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Pod<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> haproxy<br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">containers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> haproxy<br \/>\n    <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> hub.laoma.cloud\/library\/haproxy<br \/>\n    <span class=\"token key atrule\">imagePullPolicy<\/span><span class=\"token punctuation\">:<\/span> IfNotPresent<br \/>\n    <span class=\"token key atrule\">securityContext<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">allowPrivilegeEscalation<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token boolean important\">true<\/span><br \/>\n    <span class=\"token key atrule\">volumeMounts<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> config<br \/>\n      <span class=\"token key atrule\">mountPath<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;\/usr\/local\/etc\/haproxy&#034;<\/span><br \/>\n      <span class=\"token key atrule\">readOnly<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token boolean important\">true<\/span><br \/>\n  <span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> config<br \/>\n    <span class=\"token key atrule\">configMap<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> haproxy.cfg<\/p>\n<p>root&#064;master30:~\/web<span class=\"token comment\"># kubectl apply -f haproxy.yaml<\/span><\/p>\n<p><span class=\"token comment\"># \u9a8c\u8bc1<\/span><br \/>\nroot&#064;master30:~\/web<span class=\"token comment\"># kubectl get pods haproxy -o wide<\/span><br \/>\nNAME      READY   STATUS    RESTARTS   AGE   IP              NODE                  NOMINATED NODE   READINESS GATES<br \/>\nhaproxy   <span class=\"token number\">1<\/span>\/1     Running   <span class=\"token number\">0<\/span>          33s   <span class=\"token number\">10.224<\/span>.149.35   worker32.laoma.cloud   <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span>           <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span><\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># curl http:\/\/10.224.149.35:8080<\/span><br \/>\nhello webapp-1<br \/>\nroot&#064;master30:~<span class=\"token comment\"># curl http:\/\/10.224.149.35:8080<\/span><br \/>\nhello webapp-2<\/p>\n<h3>Secret<\/h3>\n<p>\u5b66\u4e60\u53c2\u8003&#xff1a;Secret<\/p>\n<h4>Secret \u4ecb\u7ecd<\/h4>\n<p>Secret \u662f\u4e00\u79cd\u5305\u542b\u5c11\u91cf\u654f\u611f\u4fe1\u606f\u7684\u5bf9\u8c61&#xff0c;\u4f8b\u5982\u5bc6\u7801\u3001\u4ee4\u724c\u6216\u5bc6\u94a5\u3002 \u8fd9\u6837\u7684\u4fe1\u606f\u53ef\u80fd\u4f1a\u88ab\u653e\u5728 Pod \u89c4\u7ea6\u4e2d\u6216\u8005\u955c\u50cf\u4e2d\u3002 \u4f7f\u7528 Secret \u610f\u5473\u7740\u4f60\u4e0d\u9700\u8981\u5728\u5e94\u7528\u7a0b\u5e8f\u4ee3\u7801\u4e2d\u5305\u542b\u673a\u5bc6\u6570\u636e\u3002<\/p>\n<p>\u521b\u5efa Secret \u53ef\u4ee5\u72ec\u7acb\u4e8e\u4f7f\u7528\u5b83\u4eec\u7684 Pod&#xff0c; \u51cf\u5c11\u5728\u521b\u5efa\u3001\u67e5\u770b\u548c\u7f16\u8f91 Pod \u7684\u5de5\u4f5c\u6d41\u7a0b\u4e2d\u66b4\u9732 Secret&#xff08;\u53ca\u5176\u6570\u636e&#xff09;\u7684\u98ce\u9669\u3002 Kubernetes \u548c\u5728\u96c6\u7fa4\u4e2d\u8fd0\u884c\u7684\u5e94\u7528\u7a0b\u5e8f\u4e5f\u53ef\u4ee5\u5bf9 Secret \u91c7\u53d6\u989d\u5916\u7684\u9884\u9632\u63aa\u65bd&#xff0c; \u4f8b\u5982\u907f\u514d\u5c06\u654f\u611f\u6570\u636e\u5199\u5165\u975e\u6613\u5931\u6027\u5b58\u50a8\u3002<\/p>\n<p>Secret \u7c7b\u4f3c\u4e8e ConfigMap \u4f46\u4e13\u95e8\u7528\u4e8e\u4fdd\u5b58\u673a\u5bc6\u6570\u636e\u3002<\/p>\n<p>Secret \u4e0eConfigMap\u7684\u533a\u522b\u5728\u4e8e&#xff1a;Secret\u5bf9\u6570\u636e\u7f16\u7801&#xff0c;ConfigMap\u4e0d\u5bf9\u6570\u636e\u7f16\u7801\u3002<\/p>\n<h4>Secret \u7c7b\u578b<\/h4>\n<ul>\n<li>\n<p>generic&#xff1a;\u5b9a\u4e49\u952e\u503c\u5bf9&#xff0c;\u5bf9\u53d8\u91cf\u503c\u52a0\u5bc6&#xff0c;\u7c7b\u578b\u4e3aOpaque\u3002<\/p>\n<\/li>\n<li>\n<p>docker-registry&#xff1a;\u7528\u4e8e\u8bbf\u95eeregistry\u4ed3\u5e93\u7684\u51ed\u636e&#xff0c;\u7c7b\u578bkubernetes.io\/dockerconfigjson\u3002<\/p>\n<\/li>\n<li>\n<p>tls&#xff1a;\u4fdd\u5b58TLS\u516c\u94a5\u548c\u79c1\u94a5&#xff0c;\u7c7b\u578b\u4e3aOpaque\u3002<\/p>\n<\/li>\n<\/ul>\n<h4>Secret \u521b\u5efa<\/h4>\n<h5>generic<\/h5>\n<p><span class=\"token comment\"># \u5e2e\u52a9\u4fe1\u606f<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl create secret generic &#8211;help<\/span><br \/>\nCreate a secret based on a file, directory, or specified literal value.<\/p>\n<p> A single secret may package one or <span class=\"token function\">more<\/span> key\/value pairs<br \/>\n<span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><\/p>\n<h6>\u57fa\u4e8e\u952e\u503c\u5bf9<\/h6>\n<p>\u4e00\u822c\u7528\u4e8e\u4f20\u9012\u53d8\u91cf\u503c\u3002<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl create secret generic mysecret1 &#8211;from-literal&#061;user&#061;tom &#8211;from-literal&#061;password1&#061;redhat &#8211;from-literal&#061;password2&#061;redhat<\/span><\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl get secrets <\/span><br \/>\nNAME                  TYPE                                DATA   AGE<br \/>\nmysecret1             Opaque                              <span class=\"token number\">3<\/span>      21s<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl get secrets mysecret1 -o yaml<\/span><br \/>\napiVersion: v1<br \/>\ndata:<br \/>\n  password1: cmVkaGF0<br \/>\n  password2: cmVkaGF0<br \/>\n  user: dG9t<br \/>\nkind: Secret<br \/>\nmetadata:<br \/>\n<span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><br \/>\n  name: mysecret1<br \/>\n  namespace: laoma<br \/>\n  resourceVersion: <span class=\"token string\">&#034;24180&#034;<\/span><br \/>\n  selfLink: \/api\/v1\/namespaces\/laoma\/secrets\/mysecret1<br \/>\n  uid: d510d58f-8737-4d2f-bd00-dd9ce6b50a9b<br \/>\ntype: Opaque<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl get secrets mysecret1 -o jsonpath&#061;{.data} | json_reformat <\/span><br \/>\n<span class=\"token punctuation\">{<\/span><br \/>\n    <span class=\"token string\">&#034;password1&#034;<\/span><span class=\"token builtin class-name\">:<\/span> <span class=\"token string\">&#034;cmVkaGF0&#034;<\/span>,<br \/>\n    <span class=\"token string\">&#034;password2&#034;<\/span><span class=\"token builtin class-name\">:<\/span> <span class=\"token string\">&#034;cmVkaGF0&#034;<\/span>,<br \/>\n    <span class=\"token string\">&#034;user&#034;<\/span><span class=\"token builtin class-name\">:<\/span> <span class=\"token string\">&#034;amFjaw&#061;&#061;&#034;<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><\/p>\n<p><span class=\"token comment\"># json_reformat \u5de5\u5177\u7531\u8f6f\u4ef6\u5305 yajl-tools \u63d0\u4f9b<\/span><\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl get secrets mysecret1 -o jsonpath&#061;{.data.user}<\/span><br \/>\n<span class=\"token assign-left variable\">amFjaw<\/span><span class=\"token operator\">&#061;&#061;<\/span><\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl describe secrets mysecret1 <\/span><br \/>\nName:         mysecret1<br \/>\nNamespace:    laoma<br \/>\nLabels:       <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span><br \/>\nAnnotations:  <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span><\/p>\n<p>Type:  Opaque<\/p>\n<p>Data<br \/>\n<span class=\"token operator\">&#061;&#061;<\/span><span class=\"token operator\">&#061;&#061;<\/span><br \/>\npassword1:  <span class=\"token number\">6<\/span> bytes<br \/>\npassword2:  <span class=\"token number\">6<\/span> bytes<br \/>\nuser:       <span class=\"token number\">3<\/span> bytes<\/p>\n<p><span class=\"token comment\"># secret \u901a\u8fc7 base64 \u7f16\u7801<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># echo -n tom | base64<\/span><br \/>\ndG9t<br \/>\nroot&#064;master30:~<span class=\"token comment\"># echo -n redhat|base64<\/span><br \/>\ncmVkaGF0<br \/>\nroot&#064;master30:~<span class=\"token comment\"># echo -n cmVkaGF0|base64 -d<\/span><br \/>\nredhat<\/p>\n<h6>\u57fa\u4e8e\u666e\u901a\u6587\u4ef6<\/h6>\n<p>\u4e00\u822c\u7528\u4e8e\u4f20\u9012\u914d\u7f6e\u6587\u4ef6\u3002<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># echo -n tom &gt; user<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># echo -n redhat &gt; password1<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># echo -n redhat &gt; password2<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl create secret generic mysecret2 &#8211;from-file&#061;.\/user &#8211;from-file&#061;.\/password1 &#8211;from-file&#061;.\/password2<\/span><br \/>\n<span class=\"token comment\"># \u6587\u4ef6\u540d\u7528\u4f5ckey\u540d&#xff0c;\u6587\u4ef6\u5185\u5bb9\u7528\u4f5cvalue&#xff0c;\u4e5f\u53ef\u4ee5\u81ea\u5b9a\u4e49key\u540d<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl create secret generic mysecret3 &#8211;from-file&#061;username&#061;.\/user &#8211;from-file&#061;.\/password1 &#8211;from-file&#061;.\/password2<\/span><\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl get secrets mysecret2 -o yaml<\/span><br \/>\napiVersion: v1<br \/>\ndata:<br \/>\n  password1: cmVkaGF0<br \/>\n  password2: cmVkaGF0<br \/>\n  user: dG9t<br \/>\nkind: Secret<br \/>\nmetadata:<br \/>\n<span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><br \/>\n  name: mysecret2<br \/>\n  namespace: laoma<br \/>\n  resourceVersion: <span class=\"token string\">&#034;25329&#034;<\/span><br \/>\n  selfLink: \/api\/v1\/namespaces\/laoma\/secrets\/mysecret2<br \/>\n  uid: 047366b6-e8d2-4cf0-b68c-d1f5f9999458<br \/>\ntype: Opaque<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl get secrets mysecret3 -o yaml<\/span><br \/>\napiVersion: v1<br \/>\ndata:<br \/>\n  password1: cmVkaGF0<br \/>\n  password2: cmVkaGF0<br \/>\n  username: dG9t<br \/>\nkind: Secret<br \/>\nmetadata:<br \/>\n<span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><br \/>\n  name: mysecret3<br \/>\n  namespace: laoma<br \/>\n  resourceVersion: <span class=\"token string\">&#034;25532&#034;<\/span><br \/>\n  selfLink: \/api\/v1\/namespaces\/laoma\/secrets\/mysecret3<br \/>\n  uid: e19df9a7-7ce3-4539-b6f5-92f83417ac1f<br \/>\ntype: Opaque<\/p>\n<h6>\u57fa\u4e8e\u952e\u503c\u5bf9\u5185\u5bb9\u7684\u6587\u4ef6<\/h6>\n<p>root&#064;master30:~<span class=\"token comment\"># echo &#039;user&#061;tom<\/span><br \/>\n<span class=\"token assign-left variable\">password1<\/span><span class=\"token operator\">&#061;<\/span>redhat<br \/>\n<span class=\"token assign-left variable\">password2<\/span><span class=\"token operator\">&#061;<\/span>redhat&#039; <span class=\"token operator\">&gt;<\/span> env.txt<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl create secret generic mysecret4 &#8211;from-env-file&#061;.\/env.txt<\/span><br \/>\nsecret\/mysecret4 created<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl get secrets mysecret4 -o yaml<\/span><br \/>\napiVersion: v1<br \/>\ndata:<br \/>\n  password1: cmVkaGF0<br \/>\n  password2: cmVkaGF0<br \/>\n  user: dG9t<br \/>\nkind: Secret<br \/>\nmetadata:<br \/>\n<span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><br \/>\n  name: mysecret4<br \/>\n  namespace: laoma<br \/>\n  resourceVersion: <span class=\"token string\">&#034;27240&#034;<\/span><br \/>\n  selfLink: \/api\/v1\/namespaces\/laoma\/secrets\/mysecret3<br \/>\n  uid: 935c0392-8e54-492d-b093-99021e0dc5bb<br \/>\ntype: Opaque<\/p>\n<h6>\u57fa\u4e8e\u76ee\u5f55<\/h6>\n<p>\u6587\u4ef6\u540d\u7528\u4f5ckey\u540d&#xff0c;\u6587\u4ef6\u5185\u5bb9\u7528\u4f5cvalue\u3002<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># mkdir config<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># mv user password1 password2 config<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl create secret generic mysecret5 &#8211;from-file&#061;.\/config<\/span><br \/>\nsecret\/my-secret5 created<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl get secrets mysecret5 -o yaml<\/span><br \/>\napiVersion: v1<br \/>\ndata:<br \/>\n  password1: cmVkaGF0<br \/>\n  password2: cmVkaGF0<br \/>\n  user: dG9t<br \/>\nkind: Secret<br \/>\nmetadata:<br \/>\n<span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><br \/>\n  name: mysecret5<br \/>\n  namespace: laoma<br \/>\n  resourceVersion: <span class=\"token string\">&#034;26687&#034;<\/span><br \/>\n  selfLink: \/api\/v1\/namespaces\/laoma\/secrets\/mysecret4<br \/>\n  uid: 04eccd8b-8686-4856-82c3-0ac697d75746<br \/>\ntype: Opaque<\/p>\n<h6>\u57fa\u4e8e yaml \u6587\u4ef6<\/h6>\n<p><span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Secret<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> mysecret6<br \/>\n<span class=\"token key atrule\">type<\/span><span class=\"token punctuation\">:<\/span> Opaque<br \/>\n<span class=\"token key atrule\">data<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">user<\/span><span class=\"token punctuation\">:<\/span> dG9t<br \/>\n  <span class=\"token key atrule\">password1<\/span><span class=\"token punctuation\">:<\/span> cmVkaGF0<br \/>\n  <span class=\"token key atrule\">password2<\/span><span class=\"token punctuation\">:<\/span> cmVkaGF0<\/p>\n<p>yaml\u683c\u5f0f\u4e2d\u53d8\u91cf\u503c\u4f7f\u7528\u8f6c\u6362\u540e\u7684\u503c\u3002<\/p>\n<h5>docker-registry<\/h5>\n<p>\u56de\u987edocker login\u547d\u4ee4&#xff1a;<\/p>\n<p>docker login DOCKER_REGISTRY_SERVER -u&#061;DOCKER_USER -p&#061;DOCKER_PASSWORD<\/p>\n<p>docker \u767b\u5f55\u7684\u4fe1\u606f\u9ed8\u8ba4\u4fdd\u5b58\u5728~\/.dockercfg&#xff0c;\u540e\u7eeddocker pull\u548cpush\u4f7f\u7528\u8be5\u51ed\u636e\u6587\u4ef6\u8bbf\u95eeregistry\u3002<\/p>\n<p>Usage:<br \/>\n  kubectl create secret docker-registry NAME &#8211;docker-username<span class=\"token operator\">&#061;<\/span>user &#8211;docker-password<span class=\"token operator\">&#061;<\/span>password &#8211;docker-email<span class=\"token operator\">&#061;<\/span>email <span class=\"token punctuation\">[<\/span>&#8211;docker-server<span class=\"token operator\">&#061;<\/span>string<span class=\"token punctuation\">]<\/span> <span class=\"token punctuation\">[<\/span>&#8211;from-literal<span class=\"token operator\">&#061;<\/span>key1<span class=\"token operator\">&#061;<\/span>value1<span class=\"token punctuation\">]<\/span> <span class=\"token punctuation\">[<\/span>&#8211;dry-run<span class=\"token operator\">&#061;<\/span>server<span class=\"token operator\">|<\/span>client<span class=\"token operator\">|<\/span>none<span class=\"token punctuation\">]<\/span> <span class=\"token punctuation\">[<\/span>options<span class=\"token punctuation\">]<\/span><\/p>\n<p>\u793a\u4f8b&#xff1a;<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl create secret docker-registry registry &#8211;docker-username&#061;laoma &#8211;docker-password&#061;redhat &#8211;docker-email&#061;admin&#064;laoma.cloud &#8211;docker-server&#061;registry.laoma.cloud<\/span><br \/>\nsecret\/docker-registry-secret created<br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl get secrets docker-registry-secret -o yaml<\/span><br \/>\napiVersion: v1<br \/>\ndata:<br \/>\n  .dockerconfigjson: <span class=\"token assign-left variable\">eyJhdXRocyI6eyJyZWdpc3RyeS5yZWRoYXQuZnVuIjp7InVzZXJuYW1lIjoibGFvbWEiLCJwYXNzd29yZCI6InJlZGhhdCIsImVtYWlsIjoibGFvbWFAcmVkaGF0LmZ1biIsImF1dGgiOiJiR0Z2YldFNmNtVmthR0YwIn19fQ<\/span><span class=\"token operator\">&#061;&#061;<\/span><br \/>\nkind: Secret<br \/>\nmetadata:<br \/>\n<span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><br \/>\n  name: docker-registry-secret<br \/>\n  namespace: laoma<br \/>\n  resourceVersion: <span class=\"token string\">&#034;29629&#034;<\/span><br \/>\n  selfLink: \/api\/v1\/namespaces\/laoma\/secrets\/docker-registry-secret<br \/>\n  uid: 017f736a-11f5-42d8-a9ed-47dad254f2c2<br \/>\ntype: kubernetes.io\/dockerconfigjson<\/p>\n<h5>TLS<\/h5>\n<p>\u521b\u5efa TLS secret \u4fdd\u5b58\u516c\u94a5\/\u79c1\u94a5\u5bf9\u3002 \u516c\u94a5\u8bc1\u4e66\u5fc5\u987b\u662f .PEM \u7f16\u7801\u3002<\/p>\n<p>Usage:<br \/>\n  kubectl create secret tls NAME <span class=\"token parameter variable\">&#8211;cert<\/span><span class=\"token operator\">&#061;<\/span>path\/to\/cert\/file <span class=\"token parameter variable\">&#8211;key<\/span><span class=\"token operator\">&#061;<\/span>path\/to\/key\/file <span class=\"token punctuation\">[<\/span>&#8211;dry-run<span class=\"token operator\">&#061;<\/span>server<span class=\"token operator\">|<\/span>client<span class=\"token operator\">|<\/span>none<span class=\"token punctuation\">]<\/span> <span class=\"token punctuation\">[<\/span>options<span class=\"token punctuation\">]<\/span><\/p>\n<p>\u521b\u5efa\u79c1\u94a5\u548c\u8bc1\u4e66<\/p>\n<p><span class=\"token comment\">#&#8211;1&#8211;\u751f\u6210\u79c1\u94a5 <\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># mkdir certs &amp;&amp; cd certs<\/span><br \/>\n<span class=\"token punctuation\">[<\/span>root&#064;master30 certs<span class=\"token punctuation\">]<\/span><span class=\"token comment\"># openssl genrsa -out www.key 2048  <\/span><\/p>\n<p><span class=\"token comment\">#&#8211;2&#8211;\u751f\u6210\u8bf7\u6c42\u6587\u4ef6csr<\/span><br \/>\n<span class=\"token punctuation\">[<\/span>root&#064;master30 certs<span class=\"token punctuation\">]<\/span><span class=\"token comment\"># openssl req -new -key www.key -out www.csr -subj &#034;\/C&#061;CN\/ST&#061;JS\/L&#061;NJ\/O&#061;LM\/OU&#061;DEVOPS\/CN&#061;www.laoma.cloud\/emailAddress&#061;admin&#064;laoma.cloud&#034; <\/span><br \/>\n<span class=\"token comment\"># CN\u7684\u503c\u5fc5\u987b\u662f\u7f51\u7ad9\u57df\u540d<\/span><\/p>\n<p><span class=\"token comment\">#&#8211;3&#8211;\u4f7f\u7528\u81ea\u5df1\u7684\u79c1\u94a5\u5bf9\u8bf7\u6c42\u6587\u4ef6\u7b7e\u540d&#xff0c;\u4ee5\u751f\u6210\u8bc1\u4e66 <\/span><br \/>\n<span class=\"token punctuation\">[<\/span>root&#064;master30 certs<span class=\"token punctuation\">]<\/span><span class=\"token comment\"># openssl x509 -req -days 3650 -in www.csr -signkey www.key -out www.crt<\/span><\/p>\n<p>\u521b\u5efa tls \u7c7b\u578b secret<\/p>\n<p><span class=\"token punctuation\">[<\/span>root&#064;master30 certs<span class=\"token punctuation\">]<\/span><span class=\"token comment\"># kubectl create secret tls www-tls &#8211;cert&#061;.\/www.crt &#8211;key&#061;.\/www.key<\/span><\/p>\n<h4>Secret \u5f15\u7528<\/h4>\n<p>Secrets\u53ef\u4ee5\u4ee5\u5377\u65b9\u5f0f\u6302\u8f7d\u7ed9pods&#xff0c;\u4e5f\u53ef\u4ee5\u901a\u8fc7\u73af\u5883\u53d8\u91cf\u65b9\u5f0f\u4f20\u9012\u7ed9pods\u3002<\/p>\n<h5>\u4ee5\u73af\u5883\u53d8\u91cf\u65b9\u5f0f\u5f15\u7528<\/h5>\n<p>\u793a\u4f8b&#xff1a;<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># vim pod-with-env-from-secret.yaml<\/span><\/p>\n<p><span class=\"token punctuation\">&#8212;<\/span><br \/>\n<span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Pod<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> mysql<br \/>\n  <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> mysql<br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">containers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> hub.laoma.cloud\/library\/mysql<span class=\"token punctuation\">:<\/span>latest<br \/>\n    <span class=\"token key atrule\">imagePullPolicy<\/span><span class=\"token punctuation\">:<\/span> IfNotPresent<br \/>\n    <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> mysql<br \/>\n    <span class=\"token key atrule\">ports<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">containerPort<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">3306<\/span><br \/>\n      <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> mysql<br \/>\n    <span class=\"token key atrule\">env<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> MYSQL_ROOT_PASSWORD<br \/>\n      <span class=\"token comment\"># \u539f\u5148\u901a\u8fc7value\u8bbe\u7f6e\u73af\u5883\u53d8\u91cf\u503c<\/span><br \/>\n      <span class=\"token key atrule\">valueFrom<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token key atrule\">secretKeyRef<\/span><span class=\"token punctuation\">:<\/span><br \/>\n          <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> mysecret1<br \/>\n          <span class=\"token key atrule\">key<\/span><span class=\"token punctuation\">:<\/span> password1<\/p>\n<p>\u9a8c\u8bc1<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl apply -f pod-with-env-from-secret.yaml<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl get pod -o wide<\/span><br \/>\nNAME    READY   STATUS    RESTARTS   AGE   IP              NODE               NOMINATED NODE   READINESS GATES<br \/>\nmysql   <span class=\"token number\">1<\/span>\/1     Running   <span class=\"token number\">0<\/span>          90s   <span class=\"token number\">10.224<\/span>.51.131   worker31.laoma.cloud   <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span>           <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span><\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl exec -it mysql &#8212; bash -c &#039;echo $MYSQL_ROOT_PASSWORD&#039;<\/span><br \/>\nredhat<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># mysql -u root -predhat -h 10.224.51.131 &#8211;ssl-mode&#061;DISABLED<\/span><\/p>\n<p><span class=\"token comment\"># \u6e05\u7406pod<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl delete pod mysql &#8211;force<\/span><\/p>\n<h5>\u4ee5 volume \u65b9\u5f0f\u5f15\u7528<\/h5>\n<p>root&#064;master30:~<span class=\"token comment\"># echo Hello world &gt; index.html<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># echo error &gt; error.html<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl create secret generic web &#8211;from-file&#061;.\/index.html &#8211;from-file&#061;.\/error.html<\/span><\/p>\n<h6>\u5f15\u7528\u6574\u4f53<\/h6>\n<p>\u793a\u4f8b&#xff1a;<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># vim pod-with-volume-from-secret.yaml<\/span><\/p>\n<p><span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Pod<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">containers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> hub.laoma.cloud\/library\/nginx<span class=\"token punctuation\">:<\/span>latest<br \/>\n    <span class=\"token key atrule\">imagePullPolicy<\/span><span class=\"token punctuation\">:<\/span> IfNotPresent<br \/>\n    <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n    <span class=\"token key atrule\">volumeMounts<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webcontent<br \/>\n      <span class=\"token comment\"># mountPath\u503c\u662f\u4e00\u4e2a\u6302\u8f7d\u70b9&#xff0c;\u5c06secrete\u4e2d\u6240\u6709\u952e\u503c\u5bf9\u6302\u8f7d\u8fc7\u6765<\/span><br \/>\n      <span class=\"token key atrule\">mountPath<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;\/usr\/share\/nginx\/html&#034;<\/span><br \/>\n  <span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webcontent<br \/>\n    <span class=\"token key atrule\">secret<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">secretName<\/span><span class=\"token punctuation\">:<\/span> web<\/p>\n<p>\u9a8c\u8bc1<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl apply -f pod-with-volume-from-secret.yaml<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl get pod -o wide<\/span><br \/>\nNAME   READY   STATUS    RESTARTS   AGE   IP              NODE               NOMINATED NODE   READINESS GATES<br \/>\nweb    <span class=\"token number\">1<\/span>\/1     Running   <span class=\"token number\">0<\/span>          15s   <span class=\"token number\">10.224<\/span>.51.136   worker31.laoma.cloud   <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span>           <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span><\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># curl 10.224.51.136<\/span><br \/>\nHello World<br \/>\nroot&#064;master30:~<span class=\"token comment\"># curl 10.224.51.136\/error.html<\/span><br \/>\nerror<\/p>\n<p><span class=\"token comment\"># \u6e05\u7406pod<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl delete pod web &#8211;force<\/span><\/p>\n<h6>\u5f15\u7528\u7279\u5b9a key<\/h6>\n<p>\u793a\u4f8b&#xff1a;nginx.yaml<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># vim pod-secret-volume-single.yaml<\/span><\/p>\n<p><span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Pod<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">containers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> hub.laoma.cloud\/library\/nginx<span class=\"token punctuation\">:<\/span>latest<br \/>\n    <span class=\"token key atrule\">imagePullPolicy<\/span><span class=\"token punctuation\">:<\/span> IfNotPresent<br \/>\n    <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n    <span class=\"token key atrule\">volumeMounts<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webcontent<br \/>\n      <span class=\"token key atrule\">mountPath<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;\/usr\/share\/nginx\/html&#034;<\/span><br \/>\n  <span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webcontent<br \/>\n    <span class=\"token key atrule\">secret<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">secretName<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n      <span class=\"token key atrule\">items<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">key<\/span><span class=\"token punctuation\">:<\/span> index.html<br \/>\n        <span class=\"token comment\"># \u901a\u8fc7path\u8bbe\u7f6e\u6302\u8f7d\u7684\u6587\u4ef6\u540d&#xff0c;\u8fd9\u91cc\u6211\u4eecpath\u503c\u4e0ekey\u4e00\u81f4\u3002<\/span><br \/>\n        <span class=\"token key atrule\">path<\/span><span class=\"token punctuation\">:<\/span> index.html<\/p>\n<p>\u6216\u8005<\/p>\n<p><span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Pod<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">containers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> hub.laoma.cloud\/library\/nginx<span class=\"token punctuation\">:<\/span>latest<br \/>\n    <span class=\"token key atrule\">imagePullPolicy<\/span><span class=\"token punctuation\">:<\/span> IfNotPresent<br \/>\n    <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web<br \/>\n    <span class=\"token key atrule\">volumeMounts<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webcontent<br \/>\n      <span class=\"token comment\"># \u5c06webcontent\u4e2dindex.html\u6302\u8f7d\u5230\/usr\/share\/nginx\/html\/index.html<\/span><br \/>\n      <span class=\"token key atrule\">mountPath<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;\/usr\/share\/nginx\/html\/index.html&#034;<\/span><br \/>\n      <span class=\"token comment\"># \u4f7f\u7528subPath\u53c2\u6570&#xff0c;\u5219\u8868\u660emountPath\u7684\u503c\u662f\u4e00\u4e2a\u6587\u4ef6<\/span><br \/>\n      <span class=\"token key atrule\">subPath<\/span><span class=\"token punctuation\">:<\/span> index.html<br \/>\n  <span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> webcontent<br \/>\n    <span class=\"token key atrule\">secret<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">secretName<\/span><span class=\"token punctuation\">:<\/span> web<\/p>\n<p>\u9a8c\u8bc1<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl create -f pod-secret-volume-single.yaml<\/span><\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl get pod -o wide<\/span><br \/>\nNAME   READY   STATUS    RESTARTS   AGE   IP              NODE               NOMINATED NODE   READINESS GATES<br \/>\nweb    <span class=\"token number\">1<\/span>\/1     Running   <span class=\"token number\">0<\/span>          21s   <span class=\"token number\">10.224<\/span>.51.137   worker31.laoma.cloud   <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span>           <span class=\"token operator\">&lt;<\/span>none<span class=\"token operator\">&gt;<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># curl 10.224.51.137\/index.html<\/span><br \/>\nHello World<\/p>\n<p><span class=\"token comment\"># \/usr\/share\/nginx\/html\u76ee\u5f55\u4e2d\u6ca1\u6709index.html\u548cerror.html<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl exec web &#8212; ls \/usr\/share\/nginx\/html <\/span><br \/>\nindex.html<\/p>\n<p>\u4ee5\u5377\u65b9\u5f0f\u5f15\u7528&#xff0c;\u652f\u6301\u52a8\u6001\u66f4\u65b0secret\u5185\u5bb9&#xff1a;<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># echo &#039;Hello Nginx&#039; |base64<\/span><br \/>\n<span class=\"token assign-left variable\">SGVsbG8gbmdpbng<\/span><span class=\"token operator\">&#061;<\/span><\/p>\n<p><span class=\"token comment\"># \u66f4\u6539data.index\u5185\u5bb9\u4e3aSGVsbG8gbmdpbng&#061;<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># kubectl edit secrets web<\/span><br \/>\n<span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><br \/>\napiVersion: v1<br \/>\ndata:<br \/>\n  index: <span class=\"token assign-left variable\">SGVsbG8gbmdpbng<\/span><span class=\"token operator\">&#061;<\/span><br \/>\n<span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><span class=\"token punctuation\">..<\/span><\/p>\n<p><span class=\"token comment\"># \u7b4930\u79d2\u5de6\u53f3\u67e5\u770b<\/span><br \/>\nroot&#064;master30:~<span class=\"token comment\"># curl 10.224.51.137\/index.html<\/span><br \/>\nHello Nginx<\/p>\n<h5>\u6587\u4ef6\u6743\u9650<\/h5>\n<p>\u6620\u5c04\u8fc7\u53bb\u6587\u4ef6\u9ed8\u8ba4\u6743\u9650\u662f644&#xff08;8\u8fdb\u5236&#xff09;&#xff0c;\u5bf9\u5e9410\u8fdb\u5236\u662f420.\u3002<\/p>\n<p>\u8bbe\u7f6e\u6620\u5c04\u7684\u6240\u6709\u6587\u4ef6\u6743\u9650&#xff0c;defaultMode\u3002<\/p>\n<p>  <span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> foo<br \/>\n    <span class=\"token key atrule\">secret<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">secretName<\/span><span class=\"token punctuation\">:<\/span> mysecret1<br \/>\n      <span class=\"token key atrule\">defaultMode<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">256<\/span><\/p>\n<p>10\u8fdb\u5236\u662f256\u8f6c\u6362\u62108\u8fdb\u5236\u662f400\u3002\u56e0\u4e3ajson\u683c\u5f0f\u4e0d\u652f\u63018\u8fdb\u5236&#xff0c;\u6240\u4ee5\u4f7f\u752810\u8fdb\u5236\u3002<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl exec mypod1 &#8212; ls -l \/etc\/foo\/..data\/user<\/span><br \/>\n-r&#8212;&#8212;&#8211;     <span class=\"token number\">1<\/span> root     root             <span class=\"token number\">4<\/span> Aug  <span class=\"token number\">9<\/span> 08:58 \/etc\/foo\/<span class=\"token punctuation\">..<\/span>data\/user<\/p>\n<p>\u8bbe\u7f6e\u6620\u5c04\u7684\u5355\u72ec\u6587\u4ef6\u6743\u9650<\/p>\n<p>  <span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> foo<br \/>\n    <span class=\"token key atrule\">secret<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">secretName<\/span><span class=\"token punctuation\">:<\/span> mysecret1<br \/>\n      <span class=\"token key atrule\">items<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">key<\/span><span class=\"token punctuation\">:<\/span> user<br \/>\n        <span class=\"token key atrule\">path<\/span><span class=\"token punctuation\">:<\/span> user<br \/>\n        <span class=\"token key atrule\">mode<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">511<\/span><\/p>\n<p>10\u8fdb\u5236\u662f511\u8f6c\u6362\u62108\u8fdb\u5236\u662f777\u3002<\/p>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl exec mypod1 &#8212; ls -l \/etc\/foo\/..data\/user<\/span><br \/>\n<span class=\"token parameter variable\">-rwxrwxrwx<\/span>     <span class=\"token number\">1<\/span> root     root             <span class=\"token number\">4<\/span> Aug  <span class=\"token number\">9<\/span> 08:58 \/etc\/foo\/<span class=\"token punctuation\">..<\/span>data\/user<\/p>\n<h3>\u73af\u5883\u6e05\u7406<\/h3>\n<p>root&#064;master30:~<span class=\"token comment\"># kubectl delete ns configure<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>K8s \u914d\u7f6e\u7ba1\u7406\u5b9e\u6218&#xff1a;ConfigMap \u4e0e Secret \u5b8c\u6574\u4f7f\u7528\u6307\u5357Kubernetes Configure\u73af\u5883\u51c6\u5907ConfigMapConfigMap \u4ecb\u7ecdConfigMap \u521b\u5efa\u952e\u503c\u5bf9\u7c7b\u578b\u6587\u4ef6\u7c7b\u578b\u76ee\u5f55\u7c7b\u578bConfigMap \u5f15\u7528\u73af\u5883\u53d8\u91cf\u65b9\u5f0f\u5f15\u7528\u4ee5 volume \u65b9\u5f0f\u5f15\u7528\u5f15\u7528\u6574\u4f53\u5f15\u7528\u7279\u5b9akeyk8s \u4e2d ConfigMap\u7efc\u5408\u6848\u4f8b&#xff1a;haproxywebSecretSecret \u4ecb\u7ecdSecret \u7c7b\u578bSecret \u521b\u5efageneric\u57fa\u4e8e\u952e\u503c\u5bf9\u57fa<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[120,97],"topic":[],"class_list":["post-92042","post","type-post","status-publish","format-standard","hentry","category-server","tag-kubernetes","tag-97"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>K8s \u914d\u7f6e\u7ba1\u7406\u5b9e\u6218\uff1aConfigMap \u4e0e Secret \u5b8c\u6574\u4f7f\u7528\u6307\u5357 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/92042.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"K8s \u914d\u7f6e\u7ba1\u7406\u5b9e\u6218\uff1aConfigMap \u4e0e Secret \u5b8c\u6574\u4f7f\u7528\u6307\u5357 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"K8s \u914d\u7f6e\u7ba1\u7406\u5b9e\u6218&#xff1a;ConfigMap \u4e0e Secret \u5b8c\u6574\u4f7f\u7528\u6307\u5357Kubernetes Configure\u73af\u5883\u51c6\u5907ConfigMapConfigMap \u4ecb\u7ecdConfigMap \u521b\u5efa\u952e\u503c\u5bf9\u7c7b\u578b\u6587\u4ef6\u7c7b\u578b\u76ee\u5f55\u7c7b\u578bConfigMap \u5f15\u7528\u73af\u5883\u53d8\u91cf\u65b9\u5f0f\u5f15\u7528\u4ee5 volume \u65b9\u5f0f\u5f15\u7528\u5f15\u7528\u6574\u4f53\u5f15\u7528\u7279\u5b9akeyk8s \u4e2d ConfigMap\u7efc\u5408\u6848\u4f8b&#xff1a;haproxywebSecretSecret \u4ecb\u7ecdSecret \u7c7b\u578bSecret \u521b\u5efageneric\u57fa\u4e8e\u952e\u503c\u5bf9\u57fa\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/92042.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-08T17:40:52+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"15 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/92042.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/92042.html\",\"name\":\"K8s \u914d\u7f6e\u7ba1\u7406\u5b9e\u6218\uff1aConfigMap \u4e0e Secret \u5b8c\u6574\u4f7f\u7528\u6307\u5357 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-08-08T17:40:52+00:00\",\"dateModified\":\"2026-08-08T17:40:52+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/92042.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/92042.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/92042.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"K8s \u914d\u7f6e\u7ba1\u7406\u5b9e\u6218\uff1aConfigMap \u4e0e Secret \u5b8c\u6574\u4f7f\u7528\u6307\u5357\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"K8s \u914d\u7f6e\u7ba1\u7406\u5b9e\u6218\uff1aConfigMap \u4e0e Secret \u5b8c\u6574\u4f7f\u7528\u6307\u5357 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/92042.html","og_locale":"zh_CN","og_type":"article","og_title":"K8s \u914d\u7f6e\u7ba1\u7406\u5b9e\u6218\uff1aConfigMap \u4e0e Secret \u5b8c\u6574\u4f7f\u7528\u6307\u5357 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"K8s \u914d\u7f6e\u7ba1\u7406\u5b9e\u6218&#xff1a;ConfigMap \u4e0e Secret \u5b8c\u6574\u4f7f\u7528\u6307\u5357Kubernetes Configure\u73af\u5883\u51c6\u5907ConfigMapConfigMap \u4ecb\u7ecdConfigMap \u521b\u5efa\u952e\u503c\u5bf9\u7c7b\u578b\u6587\u4ef6\u7c7b\u578b\u76ee\u5f55\u7c7b\u578bConfigMap \u5f15\u7528\u73af\u5883\u53d8\u91cf\u65b9\u5f0f\u5f15\u7528\u4ee5 volume \u65b9\u5f0f\u5f15\u7528\u5f15\u7528\u6574\u4f53\u5f15\u7528\u7279\u5b9akeyk8s \u4e2d ConfigMap\u7efc\u5408\u6848\u4f8b&#xff1a;haproxywebSecretSecret \u4ecb\u7ecdSecret \u7c7b\u578bSecret \u521b\u5efageneric\u57fa\u4e8e\u952e\u503c\u5bf9\u57fa","og_url":"https:\/\/www.wsisp.com\/helps\/92042.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-08-08T17:40:52+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"15 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/92042.html","url":"https:\/\/www.wsisp.com\/helps\/92042.html","name":"K8s \u914d\u7f6e\u7ba1\u7406\u5b9e\u6218\uff1aConfigMap \u4e0e Secret \u5b8c\u6574\u4f7f\u7528\u6307\u5357 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-08-08T17:40:52+00:00","dateModified":"2026-08-08T17:40:52+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/92042.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/92042.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/92042.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"K8s \u914d\u7f6e\u7ba1\u7406\u5b9e\u6218\uff1aConfigMap \u4e0e Secret \u5b8c\u6574\u4f7f\u7528\u6307\u5357"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/92042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=92042"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/92042\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=92042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=92042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=92042"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=92042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}