5. Manage Storage for Application Configuration and Data

Question 1

Como se forma el yaml con los siguientes datos

Tipo Deployment
Nombre hello-deployment
Replicas 1
Selectors = app: hello-deployment
labels = app: hello-deployment
template = app:deployment
variables de ambiente= ENV_VARIABLE_1
obtiene valor de secreto key: hello y name: world
imagen= quay.io/hello-world

Answer 1

apiVersion: apps/v1
kind: Deployment
metadata:
name: hello-deployment
spec:
replicas: 1
selector:
matchLabels:
app: hello-deployment
template:
metadata:
labels:
app: hello-deployment
spec:
containers:
- env:
- name: ENV_VARIABLE_1
valueFrom:
secretKeyRef:
key: hello
name: world
image: quay.io/hello-image:latest

Question 2

Como se forma el configuration map con los siguientes datos de ejemplo:

name: example-configmap
namespace: my-app

example.property.1: hello
example.property.2: world
example.property.file multiple property.1=value-1 property.2=value-2 property.3=value-3
binario bar: L3Jvb3QvMTAw

Answer 2

apiVersion: v1
kind: ConfigMap 1
metadata:
name: example-configmap
namespace: my-app
data: 2
example.property.1: hello
example.property.2: world
example.property.file: |-
property.1=value-1
property.2=value-2
property.3=value-3
binaryData: 3
bar: L3Jvb3QvMTAw

Question 3

Como se hace el secreto con los datos siguientes:

name: example-secret
namespace: my-app
data= username: bXl1c2VyCg== password: bXlQQDU1Cg==
stringData= hostname: myapp.mydomain.com
secret properties=
property1=valueA
property2=valueB

Answer 3

apiVersion: v1
kind: Secret
metadata:
name: example-secret
namespace: my-app
type: Opaque
data:
username: bXl1c2VyCg==
password: bXlQQDU1Cg==
stringData:
hostname: myapp.mydomain.com
secret.properties: |
property1=valueA
property2=valueB

Question 4

Como se codifica y decodifica

Answer 4

echo bXl1c2VyCg== | base64 –decode
echo bXl1c2VyCg== | base64 –code

Question 5

Como se crea un secreto desde command line key1=secret1 y key2=secret2

Answer 5

oc create secret generic secret_name \
–from-literal key1=secret1 \
–from-literal key2=secret2

Question 6

Como se crea secreto desde archivos ssh-keys \
id_rsa=/path-to/id_rsa \
id_rsa.pub=/path-to/id_rsa.pub

Answer 6

kubectl create secret generic ssh-keys \
–from-file id_rsa=/path-to/id_rsa \
–from-file id_rsa.pub=/path-to/id_rsa.pub

Question 7

Como se crea secreto para TLS

cert /path-to-certificate key /path-to-key

Answer 7

oc create secret tls secret-tls \
–cert /path-to-certificate –key /path-to-key

Question 8

Como se crea configuration map my-config desde literal key1=config1 key2=config2

Answer 8

kubectl create configmap my-config \
–from-literal key1=config1 –from-literal key2=config2

Question 9

Cual es la estructura del config map name config-map-example
namespace-app

database.name sakila
database.user redhat

Answer 9

apiVersion: v1
kind: ConfigMap
metadata:
name: config-map-example
namespace: example-app
data:
database.name: sakila
database.user: redhat

Question 10

Cual es la estructura de yaml para el config map example del pod

name: config-map-example-pod
namespace: example-app

- name: example-container
  image: registry.example.com/mysql-80:1-237
  command: [ "/bin/sh", "-c", "env" ]

    - name: MYSQL_DATABASE 
      valueFrom:
          name: config-map-example
          key: database.name 

    - name: MYSQL_USER
          name: config-map-example
          key: database.user optional: true

Answer 10

apiVersion: v1
kind: Pod
metadata:
name: config-map-example-pod
namespace: example-app
spec:
containers:
- name: example-container
image: registry.example.com/mysql-80:1-237
command: [ “/bin/sh”, “-c”, “env” ]
env: 1
- name: MYSQL_DATABASE
valueFrom:
configMapKeyRef:
name: config-map-example
key: database.name
- name: MYSQL_USER
valueFrom:
configMapKeyRef:
name: config-map-example
key: database.user
optional: true

Question 11

Como se puede crear un pod usando variables desde un configmap

Answer 11

apiVersion: v1
kind: Pod
metadata:
name: config-map-example-pod
namespace: example-app
spec:
containers:
- name: example-container
image: registry.example.com/mysql-80:1-237
command: [ “/bin/sh”, “-c”, “env” ]
envFrom:
- configMapRef:
name: config-map-example
restartPolicy: Never

Question 12

Como se especifica un pod resource con imagen registry.example.com/mysql-80:1-237 y estableciendo la variable MYSQL_DATABASE y MYSQL_USER desde un config map config-map-example keys

database.name y database.user

Answer 12

apiVersion: v1
kind: Pod
metadata:
name: config-map-example-pod
namespace: example-app
spec:
containers:
- name: example-container
image: registry.example.com/mysql-80:1-237
command: [ “/bin/sh”, “-c”, “env” ]
env:
- name: MYSQL_DATABASE
valueFrom:
configMapKeyRef:
name: config-map-example
key: database.name
- name: MYSQL_USER
valueFrom:
configMapKeyRef:
name: config-map-example
key: database.user
optional: true

Question 13

Como se puede exportar la variable TEST_SECRET_UESRNAME__ENV_VAR

desde secreto para pod secret-example-pod image busybox

Answer 13

apiVersion: v1
kind: Pod
metadata:
name: secret-example-pod
spec:
containers:
- name: secret-test-container
image: busybox
command: [ “/bin/sh”, “-c”, “export” ]
env:
- name: TEST_SECRET_USERNAME_ENV_VAR
valueFrom:
secretKeyRef:
name: test-secret
key: username

Question 14

Como se monta un secreto demo-user pass zT1KTgk dentro del filesystem /app-secrets llamado demo-secret o desde archivo

volume en el deployment demo

Answer 14

oc create secret generic demo-secret \
–from-literal user=demo-user \
–from-literal root_password=zT1KTgk

[user@host ~]$ oc create secret generic demo-secret \
–from-file user=/tmp/demo/user \
–from-file root_password=/tmp/demo/root_password

[user@host ~]$ oc set volume deployment/demo \ 1
–add –type secret \ 2
–secret-name demo-secret \ 3
–mount-path /app-secrets

Question 15

Como usar un config map config-files/http.conf en volumen /app-secrets usando el config map demo-map para el deployment demo

Answer 15

oc create configmap demo-map \
–from-file=config-files/httpd.conf

oc set volume deployment/demo \
–add –type configmap \
–configmap-name demo-map \
–mount-path /app-secrets

oc set volume deployment/demo

Question 16

Como se establecen las variables del deployment demo desde el secreto demo-secret prefijo MYSQL_

Answer 16

oc set env deployment/demo \
–from secret/demo-secret –prefix MYSQL_

Question 17

Como se extrae un secreto demo-secrets namespace demo para dejarlo en la ruta /tmo/demo para actualizarlo

Answer 17

oc extract secret/demo-secrets -n demo \
–to /tmp/demo –confirm

oc set data secret/demo-secrets -n demo \
–from-file /tmp/demo/root_password