kubectl create secret generic db-secret --from-literal=password=supersecret env: - name: DB_PASSWORD valueFrom: secretKeyRef: name: db-secret key: password PersistentVolume (cluster storage):

helm create mychart # Edit templates/deployment.yaml, values.yaml helm install myapp ./mychart Metrics Server:

volumes: - name: storage persistentVolumeClaim: claimName: app-pvc Install NGINX Ingress:

apiVersion: v1 kind: PersistentVolume metadata: name: pv-local spec: capacity: storage: 10Gi accessModes: - ReadWriteOnce hostPath: path: /data/pv