Secrets in k8s container env variable: I’m guessin...
# generali
important-leather-28796
03/18/2019, 9:19 PMSecrets in k8s container env variable: I’m guessing a config secret would end up plain text in a manifest (?) - so I should continue to create a k8s secret and use a
secretKeyRefimportant-leather-28796
03/19/2019, 3:59 PM@creamy-potato-29402 any thoughts here? Should I just use pulumi secret config properties directly as env variables on a container or transfer them to a k8 secret then use a ref?
c
creamy-potato-29402
03/19/2019, 5:25 PM@important-leather-28796 yes you should, this is super super common
creamy-potato-29402
03/19/2019, 5:26 PMoh sorry — you should use kube secrets.
i
important-leather-28796
03/19/2019, 5:26 PMok, thanks. that is the way I setup before but wasn’t sure if I had to retain that
c
creamy-potato-29402
03/19/2019, 5:27 PMyou don’t have to, it’s just the way to do it if you don’t need to change the variable per stack