An open-data portal needs an opaque Secret from literal values in a…

Question

An open-data portal needs an opaque Secret from literal values in a demo Namespace so the app is not baked with passwords in the image. What is the admin's responsibility?

Accepted Answer

Create a Secret the workload references instead of embedding passwords in the container image. — Images should stay password-free—like shipping a safe without writing the combination on the cardboard. Admins create Secrets (often opaque from literals) and point the app at them.

Answer

Disable the API server so Secrets cannot be read during demos.

Answer

Replace kubelet with a cron job that prints passwords on the node console.

Answer

Store only the password in a ClusterRole rule verb list.

An open-data portal needs an opaque Secret from literal values in a demo Namespace so the app is not baked with passwords in the image. What is the admin's responsibility?

Short Explanation

Full Explanation