Difference between revisions of "Kubernetes secrets"
Jump to navigation
Jump to search
| (4 intermediate revisions by the same user not shown) | |||
| Line 3: | Line 3: | ||
* <code>[[kind: Secret]]</code> | * <code>[[kind: Secret]]</code> | ||
| + | Kubernetes Secret Types: | ||
| + | {{secret types TOC}} | ||
== Examples == | == Examples == | ||
| Line 14: | Line 16: | ||
* <code>[[kubectl get secret]]</code> | * <code>[[kubectl get secret]]</code> | ||
* <code>[[kubectl get secrets]]</code> | * <code>[[kubectl get secrets]]</code> | ||
| − | * <code>[[kubectl describe]] | + | * <code>[[kubectl get secrets -A]]</code> |
| + | * <code>[[kubectl describe secrets]]/MY_SECRET_NAME</code> | ||
* <code>[[kubectl apply]] -f ./[[secret.yml]]</code> | * <code>[[kubectl apply]] -f ./[[secret.yml]]</code> | ||
* <code>[[kubectl apply]] -k</code> | * <code>[[kubectl apply]] -k</code> | ||
Latest revision as of 09:23, 23 October 2023
https://kubernetes.io/docs/concepts/configuration/secret/
Kubernetes Secret Types:
Opaque arbitrary user-defined data kubernetes.io/service-account-token ServiceAccount token kubernetes.io/dockercfg serialized ~/.dockercfg file kubernetes.io/dockerconfigjson serialized ~/.docker/config.json file kubernetes.io/basic-auth credentials for basic authentication kubernetes.io/ssh-auth credentials for SSH authentication kubernetes.io/tls data for a TLS client or server bootstrap.kubernetes.io/token bootstrap token data istio.io/key-and-cert
Examples[edit]
kubectl create secret,kubectl get secrets,kubectl describe secrets/MY_SECRET_NAMEkubectl apply secret.ymlkubectl describe secrets/MY_SECRET_NAME
kubectl create secretkubectl get secretkubectl get secretskubectl get secrets -Akubectl describe secrets/MY_SECRET_NAMEkubectl apply -f ./secret.ymlkubectl apply -kkubectl edit secretskubectl describe secret -n kubernetes-dashboardkubectl describe secret default-token
Related terms[edit]
- Use ConfigMaps and Secrets to configure applications, CKA v1.24 (2022), CKA v1.23 (2021)
- CKA v1.18: Security persistent key value store
- CKA v1.15: Create & consume Secrets
ConfigMapssecret not found- Kustomize
base64 --decode; echoSecretKeyReftype: Opaque- SOPS: Secrets OPerationS:
sops - Kubernetes HostPath volume provider
Activities[edit]
- Delete and recreate your secret
- Learn about different
kind: Secrettypes. - Read https://poweruser.blog/how-to-encrypt-secrets-in-config-files-1dbb794f7352
News[edit]
- Aug 2020 Kubernetes v1.19 Immutable secrets and ConfigMaps https://github.com/kubernetes/enhancements/issues/1412
See also[edit]
- Kubernetes secrets:
kubectl [ get | create | describe | delete | secret ] secrets,secret.yml, kind: Secret, secretKeyRef, default-token, imagePullSecrets:, dockerconfigjson - Secrets: Kubernetes secrets,
ansible-vault, Hashicorp Vault, AWS Secrets Manager, Google Secret Manager,git-crypt, SOPS: Secrets OPerationS, Google Cloud Secret Manager
Advertising:
