Parametrize a rust container in a kubernetes cluster

help
1

I have a container that runs a rust created binary that needs to be parametrized (eg with a database password).

The easy and straightforward way would be to add the value as an environment variable and then reference it accordingly from rust. The issue is that as I understand it this is not the recommended approach security wise from Kubernetes.

This leaves us mounting Kubernetes secrets as a volume in the pod.

I played a bit with dotenv but it seems it is not supported the Kubernetes mounted secret format by default.

The issue is that I'm unable to find a good library or example that describes this pattern, without adding ugly intermediate steps.

Is there anybody that has done it, and has any best practices to provide?

2

Maybe Config — Rust config library // Lib.rs with config-secret — Rust config library // Lib.rs would help?

3

Just use serde + File::open ?

4

Thank you, this is more or less what I was looking for, will play with it a bit

5

Thank you for the suggestion, this would be the last resort indeed. I will try the config library for now and see where it leads