Credentials and Configs in Kubernetes Secrets and ConfigMaps

Kubernetes ConfigMaps and Secrets Tutorial // In this tutorial we will use ConfigMap and Secret objects in my Cluster to deploy NGINX and MySQL containers. This example is a great howto for beginners which explains how to get configuration files and credentials as examples inside the volume of the container. #Kubernetes #ConfigMaps #HomeLab

Follow me:

Timestamps:

00:00 - Introduction
01:19 - Why use ConfigMaps and Secrets?
02:40 - What is a ConfigMap?
03:19 - Nginx Config stored in a ConfigMap
08:51 - What is a Secret?
09:41 - MySQL Password in a Secret
14:57 - Nginx Certificates in a Secret
18:47 - Are Kubernetes Secrets secure?

________________
All links with "*" are affiliate links.

[stevenstreller]

One thing would have to be mentioned in any case: If I store the secret as environment variable in the deployment, I have the possibility to access this value in the running container instance via the terminal with printenv or env in the container. Here, too, the values are then in plain text. So if a potential attacker gets access to the container, he can easily read the password for the database 🙂

[PeterNunnOZ]

Looking forward to the reverse proxy and ingress bits :)

[kylehodgetts]

Opaque is said like "Oh-payk" :)

[cristianllansola]

I configured my configmaps, and works perfectly with my env values from VUE. But I'm trying to get this values in the frontend pod... i'm no able to do it....
Is there any extra conf ?
Thanks a lot for your videos.

[allisondealmeida]

Tem algum tutorial de criação de um cluster kubernetes de alta disponibilidade?

[TakeOnMe]

In case you missed 18:47 ... Base64 is not an encryption, it is an encoding only - It does nothing to protect the password!

[oussamaelkhayali]

Man, its my first comment on youtube, I really love your videos, im a beginner and whenever i have a problem, your chanel is my first choice, keep going !

[et]

absolute champion ❤ BTW that's not how you say opaque, but it was just hilarious 😂

[hamadaparis]

Hi Chris I have a question about kubernetes clusterIP service for pods as a single network point other pods can reach internally, where does its IP exist if I define one on my cluster, how the request travels from external pod to the service to retrieve data or whatever, I think that the virtual IP address for the service exists on the master and not the worker nodes since the worker node can go down and the service is still maintained, the request from the pod goes to the master who determines the service endpoint and routes the request to that IP I'm just saying man what would logically happen any clarification correcting would be really appreciated thanks for the content.

[SanjeevKumar-nqtd]

How to mount .crt file as secret, can you please show

[KeithDavey]

You can also pre base64 encode the secret string and put that in the secret.yaml file as well. That way he secret is not stored in plane test in the yaml file its self.