Configuration and secrets

When to use

Use this reference when generating, reviewing or operating a Service Architect project.

Behavior

• Non-secret settings are rendered into a ConfigMap.
• secretEnvFrom references one or more externally managed Kubernetes Secrets.
• Vault, External Secrets Operator, Sealed Secrets, cloud secret providers or kubectl-created Secrets can be used without changing the chart.
• Local Kafka SASL/SCRAM credentials are created idempotently from KUBERNETES_KAFKA_* environment variables.
• Config reload implementations handle Kubernetes atomic ConfigMap replacement while retaining the last valid snapshot after validation failures.

Authenticated local Kafka

KUBERNETES_KAFKA_SASL_ENABLED=true \
KUBERNETES_KAFKA_USERNAME=servicegen-local \
KUBERNETES_KAFKA_PASSWORD=replace-this-local-password \
make kubernetes-up

Related documentation