Using Secrets as environment variables in Kubernetes - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a Kubernetes Secret?

A Kubernetes Secret is a way to store and manage sensitive information, like passwords or tokens, separately from application code.

beginner

How do you use a Secret as an environment variable in a Pod?

You define an environment variable in the Pod spec that references the Secret's key using env: with valueFrom.secretKeyRef.

intermediate

Example YAML snippet to set environment variable from Secret key 'password' named 'mysecret'.

env:
  - name: DB_PASSWORD
    valueFrom:
      secretKeyRef:
        name: mysecret
        key: password

beginner

Why should you use Secrets instead of plain environment variables for sensitive data?

Secrets keep sensitive data separate from code and can be encrypted, reducing risk of accidental exposure and improving security.

beginner

What command creates a Secret from literal values?

Use kubectl create secret generic mysecret --from-literal=password=mypassword to create a Secret named 'mysecret' with a password.

How do you reference a Secret key as an environment variable in a Pod spec?

A Using <code>valueFrom.secretKeyRef</code>

B Using <code>configMapKeyRef</code>

C Using <code>envFrom.secretRef</code>

D Using <code>volumeMounts</code>

The correct way is to use valueFrom.secretKeyRef to map a Secret key to an environment variable.

Which command creates a Secret from a literal value?

A kubectl create secret generic mysecret --from-literal=password=mypassword

B kubectl create configmap mysecret --from-literal=password=mypassword

C kubectl apply -f secret.yaml

D kubectl get secret mysecret

The kubectl create secret generic command with --from-literal creates a Secret from literal values.

Why use Secrets instead of plain environment variables for sensitive data?

A Secrets use less memory

B Secrets are faster to load

C Secrets are encrypted and safer

D Secrets are easier to debug

Secrets provide encryption and better security for sensitive data compared to plain environment variables.

What is the default encoding for data stored in Kubernetes Secrets?

A UTF-8

B Base64

C Hexadecimal

D Plain text

Kubernetes stores Secret data encoded in Base64 format.

Which Kubernetes object is best for storing sensitive environment variables?

A Pod

B ConfigMap

C Service

D Secret

Secrets are designed specifically to store sensitive data like passwords or tokens.

Explain how to use a Kubernetes Secret as an environment variable in a Pod.

Think about how environment variables are set in the Pod YAML.

Describe why using Secrets is important for managing sensitive data in Kubernetes.

Consider the risks of putting passwords directly in code or config.