将 Vault Secret 注入 K8s configmap

Question

I have deployed vault in K8s . I would like to know how to inject the vault secret in the configmap of a application which has all the configuration of the application.

Answer 1

It's not possible you can not mount the vault secret into config map. But you can parallelly inject both configmap and vault secret to single deployment.

• If you are mounting configmap as the file you can mount vault secret as file into same directory or another directory.
• If injecting configmap as an environment variable you can also do the same with vault secret.

If you are injecting the configmap as environment variable i would suggest checking out the : https://github.com/DaspawnW/vault-crd

vault-crd sync the vault secret to Kubernetes secret and you can easily inject Kubernetes secret to deployment. Although it's not good considering the security perspective.

There are many different method you can inject vault secret into deployment.