Kubernetes 㧠Pod ãŒä½¿ç”¨ã§ãã‚‹ Secret を制é™ã™ã‚‹æ–¹æ³• - QiitaPod ãŒä½¿ç”¨ã§ãã‚‹ Secret を制é™ã™ã‚‹æ–¹æ³• Kubrenetes ã§ã¯ã€ServiceAccount リソース㫠kubernetes.io/enforce-mountable-secrets アノテーションを true ã§è¨å®šã™ã‚‹ã“ã¨ã§ã€ãã® ServiceAccount ã§å®Ÿè¡Œã™ã‚‹ Pod ㌠secrets フィールドã§æŒ‡å®šã•ã‚ŒãŸåŒä¸€ Namespace ã® Secret ã—ã‹ä½¿ç”¨ã§ããªã„ (マウントã§ããªã„) よã†ã«åˆ¶é™ã™ã‚‹æ©Ÿèƒ½ 1 ãŒæä¾›ã•ã‚Œã¦ã„ã¾ã™ã€‚ apiVersion: v1 kind: ServiceAccount metadata: name: test-sa annotations: kubernetes.io/enforce-mountable-secrets: "true" secrets: - name: mountable-secret-1 - nam
Kubernetes Service Account As Multi-Cloud Identity / Cloud Native Security Conference 2022 / #CNSec2022
{{#tags}}- {{label}}
{{/tags}}