Working with Google Kubernetes Engine Secrets and ConfigMaps

config-map-3.yaml

apiVersion: v1
data:
  airspeed: africanOrEuropean
  meme: testAllTheThings
kind: ConfigMap
metadata:
  name: sample3
  namespace: default
  selfLink: /api/v1/namespaces/default/configmaps/sample3

pubsub-configmap2.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: pubsub
spec:
  selector:
    matchLabels:
      app: pubsub
  template:
    metadata:
      labels:
        app: pubsub
    spec:
      volumes:
      - name: google-cloud-key
        secret:
          secretName: pubsub-key
      - name: config-3
        configMap:
          name: sample3
      containers:
      - name: subscriber
        image: gcr.io/google-samples/pubsub-sample:v1
        volumeMounts:
        - name: google-cloud-key
          mountPath: /var/secrets/google
        - name: config-3
          mountPath: /etc/config
        env:
        - name: GOOGLE_APPLICATION_CREDENTIALS
          value: /var/secrets/google/key.json
        - name: INSIGHTS
          valueFrom:
            configMapKeyRef:
              name: sample3
              key: meme

pubsub-secret.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: pubsub
spec:
  selector:
    matchLabels:
      app: pubsub
  template:
    metadata:
      labels:
        app: pubsub
    spec:
      volumes:
      - name: google-cloud-key
        secret:
          secretName: pubsub-key
      containers:
      - name: subscriber
        image: gcr.io/google-samples/pubsub-sample:v1
        volumeMounts:
        - name: google-cloud-key
          mountPath: /var/secrets/google
        env:
        - name: GOOGLE_APPLICATION_CREDENTIALS
          value: /var/secrets/google/key.json

pubsub.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: pubsub
spec:
  selector:
    matchLabels:
      app: pubsub
  template:
    metadata:
      labels:
        app: pubsub
    spec:
      containers:
      - name: subscriber
        image: gcr.io/google-samples/pubsub-sample:v1

sample2.properties

message2=world
foo=bar
meaningOfLife=42

setup-env.sh

#preset
export my_zone=us-central1-a
export my_cluster=standard-cluster-1
source <(kubectl completion bash)
export my_service_account=[MY-SERVICE-ACCOUNT-EMAIL]

#move on
gcloud container clusters create $my_cluster --num-nodes 2 --zone $my_zone --service-account=$my_service_account
gcloud container clusters get-credentials $my_cluster --zone $my_zone

export my_pubsub_topic=echo
export my_pubsub_subscription=echo-read

gcloud pubsub topics create $my_pubsub_topic
gcloud pubsub subscriptions create $my_pubsub_subscription --topic=$my_pubsub_topic
git clone https://github.com/GoogleCloudPlatform/training-data-analyst
ln -s ~/training-data-analyst/courses/ak8s/v1.1 ~/ak8s
cd ~/ak8s/Secrets/

kubectl apply -f pubsub.yaml
kubectl get pods -l app=pubsub

#create secrets
kubectl create secret generic pubsub-key >  --from-file=key.json=$HOME/credentials.json

rm -rf ~/credentials.json

kubectl apply -f pubsub-secret.yaml
kubectl get pods -l app=pubsub
gcloud pubsub topics publish $my_pubsub_topic --message="Hello, world!"
kubectl logs -l app=pubsub

#create configmap
kubectl create configmap sample --from-literal=message=hello
kubectl describe configmaps sample
kubectl create configmap sample2 --from-file=sample2.properties
kubectl describe configmaps sample2

#use mounted volumes to consume ConfigMaps in containers