K8s token값 secret으로 저장하기

명령어 사용

# elasticsearhc에서 token 생성
elasticsearch-service-tokens create elastic/kibana default

# secret 생성
kubectl create secret generic elasticsearch-service-token --from-literal=token='YOUR_GENERATED_TOKEN'

yml 사용

# token base64 처리
echo -n 'YOUR_GENERATED_TOKEN' | base64


# secret 생성
apiVersion: v1
kind: Secret
metadata:
  name: elasticsearch-service-token
type: Opaque
data:
  token: <BASE64_ENCODED_TOKEN>

Pod에 binding

apiVersion: apps/v1
kind: Deployment
metadata:
  name: elasticsearch
spec:
  template:
    spec:
      containers:
      - name: elasticsearch
        env:
        - name: ELASTICSEARCH_SERVICE_ACCOUNT_TOKEN
          valueFrom:
            secretKeyRef:
              name: elasticsearch-service-token
              key: token
              
 # 사용
 elasticsearch.serviceAccountToken: ${ELASTICSEARCH_SERVICE_ACCOUNT_TOKEN}