zh-trans: add secret.md (#11359)

* zh-trans: add secret.md

zh-trans: add secret.md

* Update secret.md
This commit is contained in:
AdamDang
2018-11-28 14:43:42 +08:00
committed by k8s-ci-robot
parent 304bd4a0bf
commit 6e2cc1706f
@@ -3,6 +3,21 @@ title: Secret
id: secret
date: 2018-04-12
full_link: /docs/concepts/configuration/secret/
short_description: >
Secret 用于存储敏感信息,如密码、OAuth 令牌和 SSH 密钥。
aka:
tags:
- core-object
- security
---
<!--
---
title: Secret
id: secret
date: 2018-04-12
full_link: /docs/concepts/configuration/secret/
short_description: >
Stores sensitive information, such as passwords, OAuth tokens, and ssh keys.
@@ -11,9 +26,20 @@ tags:
- core-object
- security
---
-->
<!--
Stores sensitive information, such as passwords, OAuth tokens, and ssh keys.
-->
Secret 用于存储敏感信息,如密码、OAuth 令牌和 SSH 密钥。
<!--more-->
<!--
Allows for more control over how sensitive information is used and reduces the risk of accidental exposure, including [encryption](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#ensure-all-secrets-are-encrypted) at rest. A {{< glossary_tooltip text="Pod" term_id="pod" >}} references the secret as a file in a volume mount or by the kubelet pulling images for a pod. Secrets are great for confidential data and [ConfigMaps](https://kubernetes.io/docs/tasks/configure-pod-container/configure-pod-configmap/) for non-confidential data.
-->
Secret 允许用户对如何使用敏感信息进行更多的控制,并减少信息意外暴露的风险,包括静态[加密](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#ensure-all-secrets-are-encrypted)。
{{< glossary_tooltip text="Pod" term_id="pod" >}} 通过挂载卷中的文件的方式引用 Secret,或者通过 kubelet 为 pod 拉取镜像时引用。
Secret 非常适合机密数据使用,而 [ConfigMaps](https://kubernetes.io/docs/tasks/configure-pod-container/configure-pod-configmap/) 适用于非机密数据。