Questions tagged [kubernetes-secrets]
415 questions
1
vote
2 answers
k8s management/handling of secrets inside container
I'm currently migrating my docker deployment to k8s manifests and I was wondering about the handling of secretes. Currently my docker container fetches /run/secrets/app_secret_key to get the sensitive information inside the container as env var. but…
user14389292
1
vote
1 answer
Error in image_pull_secrets for private repository Airflow deployed in Kubernetes
I have deployed apache airflow in azure kubernetes.
Helm repository of apache airflow: https://github.com/apache/airflow/tree/master/chart
AKS version: 1.16.13
Once I have airflow deployed I have tested it with this dag:
from airflow import DAG
from…
J.C Guzman
- 1,192
- 3
- 16
- 40
1
vote
1 answer
create tls secret from environment variables in kubernetes
Is there a way to create a tls secret in Kubernetes from environment variables instead of files?
For example
kubectl create secret tls secret-tls --cert $ENV1 --key $ENV2
kat
- 41
- 5
1
vote
1 answer
Mounting a large file in Kubernetes
We are running a pod in Kubernetes that needs to load a file during runtime. This file has the following properties:
It is known at build time
It should be mounted read-only by multiple pods (the same kind)
It might change (externally to the…
Frederik
- 2,777
- 1
- 20
- 26
1
vote
1 answer
K8s - secrets volume projection doesn't create file
I have problem with deploying of multiple secrets from template deployment.yaml. For some reason, when my app try to find the file within deployment, it cannot be found. Secrets are taken by groovy script from gopass.
Here is actual simplified…
OldShaterhan
- 175
- 1
- 2
- 12
1
vote
1 answer
How to write secrets to HashiCorp Valut or Azure Key Vault from Kubernetes?
I have come across injectors/drivers/et cetera for Kubernetes for most major secret providers, but the common theme with those solutions are that these only sync one-way, i.e., only from the vault to the cluster. I want to be able to update the…
agnivesh
- 115
- 1
- 2
- 10
1
vote
0 answers
how to have multiple vault mount points in a kubernetes externalsecret CRD
We have an application where secrets are rendered using Kubernetes CRD. Each secret has many key-value pairs. Now we're migrating to vault external secret and the challenge we face is vaultmountpoint is different for each key inside a secret.…
Aswin George
- 137
- 2
- 12
1
vote
0 answers
KubernetesPodOperator, mounting a Secret as volume creates symlink
KubernetesPodOperator, mounting a Secret as volume creates symlink. Application that needs to access secret (cert file) requires path to file and not symlink
I mounted a Secret object to my KubernetesPodOperator. Going inside the containers…
alltej
- 6,787
- 10
- 46
- 87
1
vote
1 answer
SSL.keystore.location can't find JKS file in my Kubernetes secrets mount
I have created a secret for my JKS file under volume mount /etc/secrets/keystore.
I am accessing my JKS file path as an environment variable where ssl.keystore.location gets resolved as file:///etc/secrets/keystore/ssl.jks. But I get exception from…
victor perfect
- 31
- 2
- 6
1
vote
5 answers
Unable to create a Secret Using kubectl
I am trying to follow steps from
ref URL: Secrets-Kubernetes to create a Secret Using kubectl,
I was able to create files
username.txt
password.txt
which show under pwd
[root@1161 cdp]# ls
password.txt username.txt
and now when I try to execute…
Mike730
- 495
- 1
- 5
- 14
1
vote
2 answers
Store entire application config file as kubernetes secret
I have a config json file in my application. This is single json file which has all configs required for my nodejs application. I have many connections to many db'. I even have bifurcation like stage and production. I don't want to create secret for…
Hacker
- 7,798
- 19
- 84
- 154
1
vote
1 answer
How to import EKS secrets from AWS Secrets Manager using aws-cdk?
I have:
EKS deployed by aws-cdk script, with kubectl enabled, and apps deployed by eks.Cluster.addResource()
AWS Secrets Manager with a set of secrets I want to be available for EKS application
I tried to deploy Secret this way:
import * as sm…
Andrew
- 3,696
- 3
- 40
- 71
1
vote
2 answers
Correct way to create a k8s secret?
I am not sure if I'm interpreting the output from my container correctly, but I am seeing the following output from sequelize in the logs:
Nates-MacBook-Pro:k8s natereed$ docker logs 1a3e6141d050
...
(node:36) UnhandledPromiseRejectionWarning:…
Nate Reed
- 6,761
- 12
- 53
- 67
1
vote
2 answers
How to embed JSON string as the value in a Kubernetes Secret
Part of our orchestration uses envsubst to update a YAML template file with our desired values.
envsubst < "${SECRET_TEMPLATE}" | kubectl apply -f -
The value for our keyword config is a JSON string:
data=$(jq -c . ${JSON_FILE})
This results in…
user11471017
1
vote
0 answers
Short-hand syntax for fetching multiple keys from secret map in kubernetes yaml config
In my kubernetes deployment config, I want to fetch two environment variables from a secret map called "my-environment-config". Currently the way I do that is as follows:
env:
- name: INFLUXDB_DATA_ENGINE
valueFrom:
…
Mr. Developerdude
- 9,118
- 10
- 57
- 95