How can I present environmental information (like external service URLs or passwords) to an OpenShift / Kubernetes deployment?

1/15/2020

I have a front-end (React) application. I want to build it and deploy to 3 environments - dev, test and production. As every front-end app it needs to call some APIs. API addresses will vary between the environments. So they should be stored as environment variables.

I utilize S2I Openshift build strategy to create the image. The image should be built and kind of sealed for changes, then before deployment to each particular environment the variables should be injected.

So I believe the proper solution is to have chained, two-stage build. First one S2I which compiles sources and puts it into Nginx/Apache/other container, and second which takes the result of the first, adds environment variables and produces final images, which is going to be deployed to dev, test and production.

Is it correct approach or maybe simpler solution exists?

-- Landeeyo
containers
devops
docker
kubernetes
openshift

1 Answer

1/15/2020

I would not bake your environmental information into your runtime container image. One of the major benefits of containerization is to use the same runtime image in all of your environments. Generating a different image for each environment would increase the chance that your production deployments behave differently that those you tested in your lower environments.

For non-sensitive information the typical approach for parameterizing your runtime image is to use one or more of:

For sensitive information the typical approach is to use:

-- Nick
Source: StackOverflow