From d0ee62976a82ec740c0ddda60e8e01aca5196155 Mon Sep 17 00:00:00 2001 From: Zach Puckett Date: Tue, 5 Dec 2017 14:21:16 -0600 Subject: [PATCH 1/5] add secret to glossary --- _data/glossary/secret.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 _data/glossary/secret.yml diff --git a/_data/glossary/secret.yml b/_data/glossary/secret.yml new file mode 100644 index 0000000000..b2f7738fa8 --- /dev/null +++ b/_data/glossary/secret.yml @@ -0,0 +1,14 @@ +id: secret +name: Secret +full-link: /docs/concepts/configuration/secret/ +related: +- pods +- volume +tags: +- core-object +- security +short-description: > + stores sensitive information, such as passwords, OAuth tokens, and ssh keys. +long-description: > + Sensetive information stored in a Secret allows for more control over how it is used and reduces the risk of accidental exposure. + A {% glossary_tooltip text="Pod" term_id="pod" %} references the secret as a file in a {% glossary_tooltip text="Volume" term_id="volume" %} mount or by the kubelet pulling images for a pod. From 7c3a88e224db995db804b6984e153c53d2302314 Mon Sep 17 00:00:00 2001 From: Zach Puckett Date: Tue, 5 Dec 2017 14:28:56 -0600 Subject: [PATCH 2/5] update to account for volume missing in glossary --- _data/glossary/secret.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_data/glossary/secret.yml b/_data/glossary/secret.yml index b2f7738fa8..8fd6e9d36b 100644 --- a/_data/glossary/secret.yml +++ b/_data/glossary/secret.yml @@ -11,4 +11,4 @@ short-description: > stores sensitive information, such as passwords, OAuth tokens, and ssh keys. long-description: > Sensetive information stored in a Secret allows for more control over how it is used and reduces the risk of accidental exposure. - A {% glossary_tooltip text="Pod" term_id="pod" %} references the secret as a file in a {% glossary_tooltip text="Volume" term_id="volume" %} mount or by the kubelet pulling images for a pod. + A {% glossary_tooltip text="Pod" term_id="pod" %} references the secret as a file in a volume mount or by the kubelet pulling images for a pod. From 7a43b1f7f84e316decbfcac7fe1ee1dc1bcea504 Mon Sep 17 00:00:00 2001 From: Zach Puckett Date: Tue, 5 Dec 2017 14:35:38 -0600 Subject: [PATCH 3/5] cleanup long description --- _data/glossary/secret.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/_data/glossary/secret.yml b/_data/glossary/secret.yml index 8fd6e9d36b..b6e27dabcc 100644 --- a/_data/glossary/secret.yml +++ b/_data/glossary/secret.yml @@ -8,7 +8,7 @@ tags: - core-object - security short-description: > - stores sensitive information, such as passwords, OAuth tokens, and ssh keys. + Stores sensitive information, such as passwords, OAuth tokens, and ssh keys. long-description: > - Sensetive information stored in a Secret allows for more control over how it is used and reduces the risk of accidental exposure. + Allows for more control over how sensistive information is used and reduces the risk of accidental exposure. A {% glossary_tooltip text="Pod" term_id="pod" %} references the secret as a file in a volume mount or by the kubelet pulling images for a pod. From 464037d569481e835ee5fb354d127d5ed7afab4b Mon Sep 17 00:00:00 2001 From: Zach Puckett Date: Tue, 5 Dec 2017 14:56:55 -0600 Subject: [PATCH 4/5] update to include encryption and reference to configMaps --- _data/glossary/secret.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/_data/glossary/secret.yml b/_data/glossary/secret.yml index b6e27dabcc..392fff9119 100644 --- a/_data/glossary/secret.yml +++ b/_data/glossary/secret.yml @@ -10,5 +10,6 @@ tags: short-description: > Stores sensitive information, such as passwords, OAuth tokens, and ssh keys. long-description: > - Allows for more control over how sensistive information is used and reduces the risk of accidental exposure. - A {% glossary_tooltip text="Pod" term_id="pod" %} references the secret as a file in a volume mount or by the kubelet pulling images for a pod. + Allows for more control over how sensistive information is used and reduces the risk of accidental exposure, including [encryption](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#ensure-all-secrets-are-encrypted) at rest. + A {% glossary_tooltip text="Pod" term_id="pod" %} references the secret as a file in a volume mount or by the kubelet pulling images for a pod. + Secrets are great for confidential data and [ConfigMaps](https://kubernetes.io/docs/tasks/configure-pod-container/configmap/) for non-confidential data. From 748ae7ec7c3978319bb173cc55ea2e1ea7d74a5a Mon Sep 17 00:00:00 2001 From: Zach Puckett Date: Tue, 5 Dec 2017 15:02:08 -0600 Subject: [PATCH 5/5] fix typo --- _data/glossary/secret.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_data/glossary/secret.yml b/_data/glossary/secret.yml index 392fff9119..1565df28f8 100644 --- a/_data/glossary/secret.yml +++ b/_data/glossary/secret.yml @@ -10,6 +10,6 @@ tags: short-description: > Stores sensitive information, such as passwords, OAuth tokens, and ssh keys. long-description: > - Allows for more control over how sensistive information is used and reduces the risk of accidental exposure, including [encryption](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#ensure-all-secrets-are-encrypted) at rest. + Allows for more control over how sensitive information is used and reduces the risk of accidental exposure, including [encryption](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#ensure-all-secrets-are-encrypted) at rest. A {% glossary_tooltip text="Pod" term_id="pod" %} references the secret as a file in a volume mount or by the kubelet pulling images for a pod. Secrets are great for confidential data and [ConfigMaps](https://kubernetes.io/docs/tasks/configure-pod-container/configmap/) for non-confidential data.