### apps

### 调试
```shell
kubectl run -i --tty --rm --restart=Never \
    --overrides='{"apiVersion": "v1", "spec": {"nodeSelector": {"kubernetes.io/hostname": "homea"}}}' \
    --image=nicolaka/netshoot:latest \
    debug -- sh
```

### 密钥相关
可以将helm部署中使用到的密钥放到k8s的secret中
然后使用reflector将secret中的密钥同步到其他namespace中
```shell
kubectl -n infra-devops create secret generic s3-devcm-hw \
    --from-literal=ACCESS_KEY_ID=xxxxx \
    --from-literal=ACCESS_SECRET_KEY=xxxxx
    
kubectl -n infra-devops annotate secret s3-devcm-hw \
    reflector.v1.k8s.emberstack.com/reflection-allowed=true \
    reflector.v1.k8s.emberstack.com/reflection-allowed-namespaces=infra-data \
    reflector.v1.k8s.emberstack.com/reflection-auto-enabled=true \
    reflector.v1.k8s.emberstack.com/reflection-auto-namespace=infra-data --overwrite
    
```