How should a container receive a single Secret key password from Se…

Question

How should a container receive a single Secret key password from Secret db-creds as the environment variable DBPASSWORD?

Accepted Answer

Use an env entry with valueFrom.secretKeyRef naming the Secret and the password key. — secretKeyRef is a precise straw: one Secret key poured into one env var. Point valueFrom.secretKeyRef at db-creds / password for DBPASSWORD. imagePullSecrets and raw Secret names in value don't do that mapping.

Answer

Mount the entire etcd database read-only and parse the Secret key from disk dumps.

Answer

Set env.value to the plain Secret name and rely on kubelet to dereference keys.

Answer

Add the Secret name to imagePullSecrets so credentials appear as process environment.

How should a container receive a single Secret key `password` from Secret `db-creds` as the environment variable `DB_PASSWORD`?

Short Explanation

Full Explanation

How should a container receive a single Secret key password from Secret db-creds as the environment variable DB_PASSWORD?

Short Explanation

Full Explanation

How should a container receive a single Secret key `password` from Secret `db-creds` as the environment variable `DB_PASSWORD`?