k8s - opaque secret

 

As you already know, k8s have many secrets - opaque, tls (certificate), service account, ssh, docker secret, boostrap token secret.

Opaque secret

Creating a single secret (username in this case) 

kubectl create secret generic user-info --from-literal=user_secret=mysecret 

Creating a secret with multiple key 

kubectl create secret generic user-info --from-literal=user_secret=mysecret --from-literal=user_password=password



From file

We can create secret from file using the following command :- 

kubectl create secret generic user-info-file --from-file=./username.txt --from-file=password.txt

The filename will be used as key 



Using secret from environment variables

The yaml here shows you how to reference/user secrets in your pod





 



































Comments

Post a Comment

Popular posts from this blog

The specified initialization vector (IV) does not match the block size for this algorithm

Image
If you're getting  exception when trying to assigned key to a symmetric key and getting error message below :- The specified initialization vector (IV) does not match the block size for this algorithm And your code probably look like something below :- Then you need to go into debug mode and start looking into the supported size for IV as shown in diagram below :- As you can see, IV is 16 bytes, so you need to provide 16 bytes. The same goes for Key field too, if you're adding anything to it. As long as you provide a valid key size, then we're good and you're code will be ready.
Read more