Lab
A Cloud Guru

Troubleshooting Secrets in Kubernetes Deployments

You are a container engineer at Cube4Lyf, an e-gaming platform geared towards puzzle and logic games. As their Kubernetes implementation matures, the security team is looking to leverage cluster Secrets to manage sensitive information. For one of their early prototypes, a team has attempted to access credentials for a third-party service as environment Secrets within their containers. However, the engineers report that the container is currently unable to resolve the sensitive values as expected, preventing it from accessing the external service. You will need to examine the configuration of the Secret and the Deployment creating the Pod to fix this issue.

Try for free Contact sales

Path Info

Level

Intermediate

Duration

45m

Published

Dec 16, 2021

Challenge

Fix the Configuration Issues in vendor-secret.yaml
Identify and correct the issues in vendor-secret.yaml so that the Secret data maps to an environment variable.

Storing Secrets as an encoded map:
```
apiVersion: v1
kind: Secret
metadata:
  name: vendor-secret
data:
  endpoint: YXBpLmUtc2FsZS5jb20vdjIK   
  token: Z3Vlc3NtZWlmeW91Y2FuCg==
```

Challenge

Fix the Configuration Issues in application-deployment.yaml

Identify and correct the issues in application-deployment.yaml so that the Secret data maps to an environment variable.

Accessing Secrets as environment variables:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: puzzle-plaza
spec:
  selector:
    matchLabels:
      app: puzzle-plaza
  replicas: 1
  template:
    metadata:
        labels:
            app: puzzle-plaza
    spec:
        containers:
        - name: shop-app
          image: busybox
          command: ['sh', '-c', 'while true; echo "STATUS: UP"; do sleep 3600; done']
          env:
          - name: ENDPOINT
            valueFrom:
              secretKeyRef:
                name: vendor-secret
                key: endpoint
          - name: TOKEN
            valueFrom:
              secretKeyRef:
                name: vendor-secret
                key: token

Author

A Cloud Guru

The Cloud Content team comprises subject matter experts hyper focused on services offered by the leading cloud vendors (AWS, GCP, and Azure), as well as cloud-related technologies such as Linux and DevOps. The team is thrilled to share their knowledge to help you build modern tech solutions from the ground up, secure and optimize your environments, and so much more!

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.