Skip to content

Commit 52e6f41

Browse files
k8s-ci-robotk8s-ci-robot
authored
Merge pull request #43413 from my-git9/secret123
[zh-cn] sync configuration/secret
2 parents 7bbd4d6 + b9a64ed commit 52e6f41

10 files changed

+175
-230
lines changed

‎content/zh-cn/docs/concepts/configuration/secret.md

Lines changed: 39 additions & 230 deletions
Large diffs are not rendered by default.

‎content/zh-cn/examples/secret/basicauth-secret.yaml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
apiVersion: v1
2+
kind: Secret
3+
metadata:
4+
name: secret-basic-auth
5+
type: kubernetes.io/basic-auth
6+
stringData:
7+
username: admin # kubernetes.io/basic-auth 类型的必需字段
8+
password: t0p-Secret # kubernetes.io/basic-auth 类型的必需字段

‎content/zh-cn/examples/secret/bootstrap-token-secret-base64.yaml

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
apiVersion: v1
2+
kind: Secret
3+
metadata:
4+
name: bootstrap-token-5emitj
5+
namespace: kube-system
6+
type: bootstrap.kubernetes.io/token
7+
data:
8+
auth-extra-groups: c3lzdGVtOmJvb3RzdHJhcHBlcnM6a3ViZWFkbTpkZWZhdWx0LW5vZGUtdG9rZW4=
9+
expiration: MjAyMC0wOS0xM1QwNDozOToxMFo=
10+
token-id: NWVtaXRq
11+
token-secret: a3E0Z2lodnN6emduMXAwcg==
12+
usage-bootstrap-authentication: dHJ1ZQ==
13+
usage-bootstrap-signing: dHJ1ZQ==

‎content/zh-cn/examples/secret/bootstrap-token-secret-literal.yaml

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
apiVersion: v1
2+
kind: Secret
3+
metadata:
4+
# 注意 Secret 的命名方式
5+
name: bootstrap-token-5emitj
6+
# 启动引导令牌 Secret 通常位于 kube-system 名字空间
7+
namespace: kube-system
8+
type: bootstrap.kubernetes.io/token
9+
stringData:
10+
auth-extra-groups: "system:bootstrappers:kubeadm:default-node-token"
11+
expiration: "2020-09-13T04:39:10Z"
12+
# 此令牌 ID 被用于生成 Secret 名称
13+
token-id: "5emitj"
14+
token-secret: "kq4gihvszzgn1p0r"
15+
# 此令牌还可用于 authentication （身份认证）
16+
usage-bootstrap-authentication: "true"
17+
# 且可用于 signing （证书签名）
18+
usage-bootstrap-signing: "true"

‎content/zh-cn/examples/secret/dockercfg-secret.yaml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
apiVersion: v1
2+
kind: Secret
3+
metadata:
4+
name: secret-dockercfg
5+
type: kubernetes.io/dockercfg
6+
data:
7+
.dockercfg: |
8+
eyJhdXRocyI6eyJodHRwczovL2V4YW1wbGUvdjEvIjp7ImF1dGgiOiJvcGVuc2VzYW1lIn19fQo=

‎content/zh-cn/examples/secret/dotfile-secret.yaml

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
apiVersion: v1
2+
kind: Secret
3+
metadata:
4+
name: dotfile-secret
5+
data:
6+
.secret-file: dmFsdWUtMg0KDQo=
7+
---
8+
apiVersion: v1
9+
kind: Pod
10+
metadata:
11+
name: secret-dotfiles-pod
12+
spec:
13+
volumes:
14+
- name: secret-volume
15+
secret:
16+
secretName: dotfile-secret
17+
containers:
18+
- name: dotfile-test-container
19+
image: registry.k8s.io/busybox
20+
command:
21+
- ls
22+
- "-l"
23+
- "/etc/secret-volume"
24+
volumeMounts:
25+
- name: secret-volume
26+
readOnly: true
27+
mountPath: "/etc/secret-volume"

‎content/zh-cn/examples/secret/optional-secret.yaml

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
apiVersion: v1
2+
kind: Pod
3+
metadata:
4+
name: mypod
5+
spec:
6+
containers:
7+
- name: mypod
8+
image: redis
9+
volumeMounts:
10+
- name: foo
11+
mountPath: "/etc/foo"
12+
readOnly: true
13+
volumes:
14+
- name: foo
15+
secret:
16+
secretName: mysecret
17+
optional: true

‎content/zh-cn/examples/secret/serviceaccount-token-secret.yaml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
apiVersion: v1
2+
kind: Secret
3+
metadata:
4+
name: secret-sa-sample
5+
annotations:
6+
kubernetes.io/service-account.name: "sa-name"
7+
type: kubernetes.io/service-account-token
8+
data:
9+
extra: YmFyCg==

‎content/zh-cn/examples/secret/ssh-auth-secret.yaml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
apiVersion: v1
2+
kind: Secret
3+
metadata:
4+
name: secret-ssh-auth
5+
type: kubernetes.io/ssh-auth
6+
data:
7+
# 此例中的实际数据被截断
8+
ssh-privatekey: |
9+
MIIEpQIBAAKCAQEAulqb/Y ...

‎content/zh-cn/examples/secret/tls-auth-secret.yaml

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
apiVersion: v1
2+
kind: Secret
3+
metadata:
4+
name: secret-tls
5+
type: kubernetes.io/tls
6+
data:
7+
# 值为 base64 编码，这样会掩盖它们，但不会提供任何有用的机密性级别
8+
tls.crt: |
9+
LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUNVakNDQWJzQ0FnMytNQTBHQ1NxR1NJYjNE
10+
UUVCQlFVQU1JR2JNUXN3Q1FZRFZRUUdFd0pLVURFT01Bd0cKQTFVRUNCTUZWRzlyZVc4eEVEQU9C
11+
Z05WQkFjVEIwTm9kVzh0YTNVeEVUQVBCZ05WQkFvVENFWnlZVzVyTkVSRQpNUmd3RmdZRFZRUUxF
12+
dzlYWldKRFpYSjBJRk4xY0hCdmNuUXhHREFXQmdOVkJBTVREMFp5WVc1ck5FUkVJRmRsCllpQkRR
13+
VEVqTUNFR0NTcUdTSWIzRFFFSkFSWVVjM1Z3Y0c5eWRFQm1jbUZ1YXpSa1pDNWpiMjB3SGhjTk1U
14+
TXcKTVRFeE1EUTFNVE01V2hjTk1UZ3dNVEV3TURRMU1UTTVXakJMTVFzd0NRWURWUVFHREFKS1VE
15+
RVBNQTBHQTFVRQpDQXdHWEZSdmEzbHZNUkV3RHdZRFZRUUtEQWhHY21GdWF6UkVSREVZTUJZR0Ex
16+
VUVBd3dQZDNkM0xtVjRZVzF3CmJHVXVZMjl0TUlHYU1BMEdDU3FHU0liM0RRRUJBUVVBQTRHSUFE
17+
Q0JoQUo5WThFaUhmeHhNL25PbjJTbkkxWHgKRHdPdEJEVDFKRjBReTliMVlKanV2YjdjaTEwZjVN
18+
Vm1UQllqMUZTVWZNOU1vejJDVVFZdW4yRFljV29IcFA4ZQpqSG1BUFVrNVd5cDJRN1ArMjh1bklI
19+
QkphVGZlQ09PekZSUFY2MEdTWWUzNmFScG04L3dVVm16eGFLOGtCOWVaCmhPN3F1TjdtSWQxL2pW
20+
cTNKODhDQXdFQUFUQU5CZ2txaGtpRzl3MEJBUVVGQUFPQmdRQU1meTQzeE15OHh3QTUKVjF2T2NS
21+
OEtyNWNaSXdtbFhCUU8xeFEzazlxSGtyNFlUY1JxTVQ5WjVKTm1rWHYxK2VSaGcwTi9WMW5NUTRZ
22+
RgpnWXcxbnlESnBnOTduZUV4VzQyeXVlMFlHSDYyV1hYUUhyOVNVREgrRlowVnQvRGZsdklVTWRj
23+
UUFEZjM4aU9zCjlQbG1kb3YrcE0vNCs5a1h5aDhSUEkzZXZ6OS9NQT09Ci0tLS0tRU5EIENFUlRJ
24+
RklDQVRFLS0tLS0K
25+
# 在这个例子中，密钥数据不是真正的 PEM 编码的私钥
26+
tls.key: |
27+
RXhhbXBsZSBkYXRhIGZvciB0aGUgVExTIGNydCBmaWVsZA==

0 commit comments

Comments
 (0)