How to use Secret

In this issue, the editor will bring you about how to use Secret. The article is rich in content and analyzes and narrates it from a professional point of view. I hope you can get something after reading this article.

We often have to pass sensitive information to the container, and the most common one is the password. For example:

Docker run-e MYSQL_ROOT_PASSWORD=my-secret-pw-d mysql

When we start the MySQL container, we set the administrator password for MySQL through the environment variable MYSQL_ROOT_PASSWORD. However, the password is written in clear text in the docker run command, which has potential security risks.

To solve this problem, docker swarm provides a secret mechanism that allows sensitive information to be encrypted and saved to secret, and users can specify which containers can use this secret.

If you start the MySQL container using secret, you can do this by:

Create a secret my_secret_data in swarm manager and save the password in it.

Echo "my-secret-pw" | docker secret create my_secret_data-

Start MySQL service and specify to use secret my_secret_data.

Docker service create\-name mysql\-secret source=my_secret_data,target=mysql_root_password\-e MYSQL_ROOT_PASSWORD_FILE= "/ run/secrets/mysql_root_password" > the above is what the editor shares with you about how to use Secret. If you happen to have similar doubts, please refer to the above analysis to understand. If you want to know more about it, you are welcome to follow the industry information channel.