Best practices for managing secrets
Pega supports using Kubernetes secrets to secure credentials and related information. Use secrets to represent credentials for your database, Docker registry, or any other token or key that you need to pass to a deployed application. To create a secret, follow the Kubernetes documentation for Distributing Credentials Securely Using Secrets.
Pega supports passing secrets in the following ways:
Type | Configuration Example |
Credentials using environment variables | env: - name: DB_USERNAME - valueFrom: - secretKeyRef: - name: mysecret key: username - name: DB_PASSWORD - valueFrom: secretKeyRef: - name: mysecret - key: password |
Credentials using volume mount | containers: ... volumeMounts: - name: secret-volume - mountPath: /opt/pega/secrets volumes: - name: secret-volume secret: - secretName: mysecret |
Docker registry secret | imagePullSecrets: - name: regsecret |