Image Security

- secret type 확인 명령어

kubectl create secret --help

 

- docker registry Type의 secret 생성 명령어

kubectl create secret docker-registry private-reg-cred --docker-server=myprivateregistry.com:5000 --docker-username=dock_user --docker-password=dock_password --docker-email=dock_user@myprivateregistry.com

- deployment에 secert 사용하도록 수정

apiVersion: v1
kind: Pod
metadata:
  name: private-reg
spec:
  containers:
  - name: private-reg-container
    image: <your-private-image>
  imagePullSecrets:
  - name: regcred

https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/