// Aula 26 - Secrets

https://kubernetes.io/docs/concepts/configuration/secret/

https://kubernetes.io/docs/concepts/configuration/secret/#secret-types

# curl -o kuard.crt https://storage.googleapis.com/kuar-demo/kuard.crt

# curl -o kuard.key https://storage.googleapis.com/kuar-demo/kuard.key

# kubectl create secret generic kuard-tls \
--from-file=kuard.crt \
--from-file=kuard.key

# kubectl describe secrets kuard-tls

/tls/kuard.crt
/tls/kuard.key

# vim kuard-secret.yaml

# kuard-secret

apiVersion: v1
kind: Pod
metadata:
  name: kuard-tls
spec:
  containers:
    - name: kuard-tls
      image: gcr.io/kuar-demo/kuard-amd64:1
      imagePullPolicy: Always
      volumeMounts:
      - name: tls-certs
        mountPath: "/tls"
        readOnly: true
  volumes:
    - name: tls-certs
      secret:
        secretName: kuard-tls

# kubectl apply -f kuard-secret.yaml

# kubectl port-forward kuard-tls 8443:8443

https://localhost:8443