GoogleContainerTools / kpt-samples

kpt project samples
Apache License 2.0
7 stars 9 forks source link

POC: secret generated from init container #13

Open yuwenma opened 2 years ago

yuwenma commented 2 years ago

We store the password inside the container image and use Init container to create secret via in-pod APIServer calls.

The advantage is that platform admin fully manages the sensitive info via upstream package updates, and app users can use the pre-wired package easily without additional steps.