如何在 .NET Core 中将 kubernetes secret 设置为连接字符串密码？

Question

I have a connection string in my .NET Core application that is used to connect to a database.

{
    "ConnectionStrings": {
        "BloggingDatabase": "Server=myServerAddress;Database=myDataBase;User Id=myUsername;Password=myPassword;"
    },
}

I can use plain text password in development. But in kubernetes deployment, I am creating secrets as environment variables.

apiVersion: v1
kind: Secret
metadata:
  name: mysecret
type: Opaque
data:
  db_password: MWYyZDFlMmU2N2Rm

and pod like this:

apiVersion: v1
kind: Pod
metadata:
  name: secret-env-pod
spec:
  containers:
  - name: mycontainer
    image: my_app:v1
    env:
      - name: SECRET_PASSWORD
        valueFrom:
          secretKeyRef:
            name: mysecret
            key: db_password

But my connection string is not separated the password and username. So how can I replace it in Kubernetes deployment?

Answer 1

As per the k8's official doc , you need to create a config file that holds your username and password as secret. As per your config you missed to add the username to which the password should hold.

Below is the sample configuration, change accordingly:

apiVersion: v1
kind: Secret
metadata:
  name: test-secret
type: Opaque
data:
  username: bXktYXBw
  password: Mzk1MjgkdmRnN0pi

Refer to this doc for more information and use cases.