Questions tagged [kubernetes-secrets]

415 questions
1
vote
1 answer

Helm chart to use secrets from cert-manager

I want to automate the use a certificate, that is created by cert-manager as documented here, in a Helm chart. For example, the YAML below. --- apiVersion: v1 kind: Pod metadata: name: mypod labels: app: mypod spec: containers: - name:…
cogitoergosum
  • 2,309
  • 4
  • 38
  • 62
1
vote
2 answers

Use Kubernetes secrets as environment variables inside a config map

I have an application in a container which reads certain data from a configMap which goes like this apiVersion: v1 kind: ConfigMap metadata: name: app-config data: application.yaml: | server: port: 8080 host:…
1
vote
2 answers

How to pass user credentials to (user-restricted) mounted volume inside Kubernetes Pod?

I am trying to pass user credentials via Kubernetes secret to a mounted, password protected directory inside a Kubernetes Pod. The NFS folder /mount/protected has user access restrictions, i.e. only certain users can access this folder. This is my…
Jonas
  • 133
  • 1
  • 2
  • 7
1
vote
2 answers

How can I print an Ansible vaulted variable that includes a Kubernetes secret from the CLI?

I have a Ansible group_vars directory with the following file within it: $ cat inventory/group_vars/env1 ... ... ldap_config: !vault | $ANSIBLE_VAULT;1.1;AES256 …
slm
  • 15,396
  • 12
  • 109
  • 124
1
vote
1 answer

Error from server (BadRequest): container "espace-client-client" in pod "espace-client-client" is waiting to start: trying and failing to pull image

I've deployed my first app on my Kubernetes prod cluster a month ago. I could deploy my 2 services (front / back) from gitlab registry. Now, I pushed a new docker image to gitlab registry and would like to redeploy it in prod: Here is my deployment…
Juliatzin
  • 18,455
  • 40
  • 166
  • 325
1
vote
2 answers

How to handle secrets in ConfigMaps?

I would like to use a Secret inside a ConfigMap. Is this possible? Example: An example where this might be required is if you would like to write from Fluentd to S3. In the configuration you have to add your AWS credentials. Alternatives: Using…
User12547645
  • 6,955
  • 3
  • 38
  • 69
1
vote
1 answer

Kubernetes secrets plugin not working with no useful logs

I deployed drone.io using the helm chart. Builds are working fine. For my secrets I folowed this docs : https://readme.drone.io/extend/secrets/kubernetes/install/ So I created a secret to hold the shared secret key between the plugin and the drone…
sebt3
  • 534
  • 6
  • 10
1
vote
1 answer

Isolate Secrets at Service layer in same namespace

I am trying to find out how can I isolate my Kubernetes Secrets to specific Service. For example, let say I have two secrets with name private-key and public-key and two Kubernetes Services auth-service and gateway-service. I want to provide…
Nirav
  • 602
  • 1
  • 10
  • 28
1
vote
1 answer

Advantage of using volume secrets over usual volume mounting

I was wondering if there is any advantage of using secrets over standard file mounting in Kubernetes. I have to provide credentials, saved on the host machine to one of pods and just cannot understand what are the pros of using them.
Mateusz Stompór
  • 461
  • 6
  • 15
1
vote
2 answers

Retrieve Kubernetes Secrets mounted as volumes

Hi I am playing around with Kubernetes secrets. My deployment file is : --- apiVersion: v1 kind: Secret metadata: name: my-secrets labels: app: my-app data: username: dXNlcm5hbWU= password: cGFzc3dvcmQ= I am able to create secrets and I…
Nirav
  • 602
  • 1
  • 10
  • 28
1
vote
1 answer

How do I use relative path for a secret mountPath in deployment configuration

I'm having hard time configuring mountPath as a relative path. Let's say I'm running the deployment from /user/app folder and I want to create secret file under /user/app/secret/secret-volume as follows: apiVersion: v1 kind: Pod metadata: name:…
Shiran Amiel
  • 21
  • 1
  • 3
1
vote
1 answer

Use Kubernetes secrets as environment variables in Angular 6

I configured an automatic build of my Angular 6 app and deployment in Kubernetes each time is push to my code repository (Google Cloud Repository). Dev environment variables are classically store in a environment.ts file like this: export const…
Manuel RODRIGUEZ
  • 2,131
  • 3
  • 25
  • 53
1
vote
0 answers

Using k8s secrets in concourse pipeline

This question is similar to this one Concourse CI can't find kubernetes secrets . However, the marked solution in it did not work for me. I have setup concourse using this helm chart https://github.com/helm/charts/tree/master/stable/concourse My…
kosta
  • 4,302
  • 10
  • 50
  • 104
1
vote
3 answers

Kubernetes storing key-value pair in Secret.yml

I am wondering if it is possible to store a key-value pair in Secret.yml. I want to be able to store an encryption key as a value and an id as its key which I can use to retrieve the encryption key stored in Secret.yml. Is such functionality…
boringDeveloper
  • 107
  • 3
  • 10
1
vote
1 answer

how could `secret` protect sensitive information in Kubernetes

I am fresh to Kubernetes. My understanding of secret is that it encodes information by base64. And from the resources I have seen, it is claimed that secret could protect sensitive information. I do not get this. Besides encoding information with…
Quan Zhou
  • 307
  • 1
  • 12