Questions tagged [kubernetes-secrets]
415 questions
0
votes
1 answer
Kubernetes container secret not recognized by app as env variable when app starts causing it to fail
Im having an issue with deploying my app to my Kubernetes cluster in Digital Ocean and I cannot for the life of me figure out how to solve this issue.
I'm creating a python flask api with Celery using cloudamqp to handle tasks for my api routes. …
Ray
- 1,548
- 2
- 11
- 18
0
votes
1 answer
Azure Devops kubernetes secrets get value from pipeline environmental variable
I'm trying to deploy a java application which requires a couple of environmetal variables to connect to other systems. I'm using kubernetes to deploy the application to a namespace. I manage to do this successfully. What I cannot seem to get correct…
davidb
- 1,503
- 4
- 30
- 49
0
votes
1 answer
Trigger Kubernetes job on secret update
How do you trigger rerunning a job once one of its dependent secrets get updated?
For example, say I have this simple job:
apiVersion: batch/v1
kind: Job
metadata:
name: job-test
spec:
template:
metadata:
labels:
app:…
Daniel
- 8,655
- 5
- 60
- 87
0
votes
0 answers
Sync AWS Secrets manager with Kubernetes secrets on local not working when using minikube and localstack
I am trying to configure AWS secrets with my kubernetes cluster in such a way that I can expose secrets as environment variable in my deployment file
OS: Mac
I am using minikube for local testing
For AWS I am using localstack
secrets manager I have…
Deepak Tripathi
- 3,175
- 1
- 8
- 21
0
votes
0 answers
What's the correct way to fill out volumes section in YAML for Airflow installation with Kubernetes Secrets?
I'm trying to create an override.yaml to place my own values to my Airflow chart installation, however since I'm fairly new to YAML I can't seem to fill out the volumes: [] and volumeMounts: [] section of the values.yaml file correctly.
Use Case:…
0
votes
0 answers
kubectl secrets volume mount gets "Caused by: java.io.IOException: Invalid keystore format" for keystore.jks
I am new to kubectl and helm charts but I am using both to deploy Fortify SSC to a k8s cluster. The k8s resources and the application seem to deploy correctly from an iac perspective but I keep getting java.io.IOException: Invalid keystore format…
John R
- 350
- 2
- 5
- 19
0
votes
0 answers
How Can I create a kubernetes secret using secretproviderclass of the entire OBJECT? Not tied to a single key
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
name: aws-secrets
spec:
provider: aws
secretObjects:
- data:
- key: somekey
objectName: awssecretmanagersecretname
…
Shanthi
- 637
- 2
- 7
- 17
0
votes
1 answer
Kubernetes: CreateContainerConfigError secret not found
https://kubernetes.io/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume/
kubectl apply -k .
service/wordpress created
service/wordpress-mysql created
persistentvolumeclaim/mysql-pv-claim…
eastwater
- 4,624
- 9
- 49
- 118
0
votes
0 answers
kubernetes: how to define which key-value pairs to be picked from an env file when creating k8s secret using --from-file or --from-env-file flag?
I have an env file as below:
K1=s1
K2=s2
K3=s3
# many other key-value pairs I don't know about
I want to create a Kubernetes secret from K1 only
Actually, I am looking for a result that I would get if I had run kubectl create secret generic…
Amin Ba
- 1,603
- 1
- 13
- 38
0
votes
1 answer
TopicAuthorizationException when kafka connect tries to access offset storage topic. JKS files are placed as secrets volume mount on kubernetes
Deploying kafka connect worker on kubernetes. Helm charts are used for deployment. Kafka cluster is SSL encrypted so we are using JKS keystore and truststore. Kafka connect couldn't access the offset storage topic and throws the…
devvin
- 1
- 2
0
votes
1 answer
Access sealed secret from deployment.yaml in helm chart
I'm trying to use a helm chart to deploy my secrets as sealed secret, I have created a template for the sealed secret
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
name: {{ include "api.fullname" . }}
namespace: api
spec:
…
akano1
- 40,596
- 19
- 54
- 67
0
votes
1 answer
How to attribute Kubernetes resource creation
I'm experiencing a weird issue where a k8s resource I previously created, then subsequently deleted via kubectl is being mysteriously coming back. It's a vanilla k8s cluster (no operators), and I should be the only user of the cluster.
$ kubectl get…
paws
- 1,263
- 15
- 23
0
votes
1 answer
cert-manager.io/v1 : Why does the name of the Secret holding my signed Certificate not match what I specified in the Certificate's yaml?
Using cert-manager operator 1.11.0 provided by "The cert-manager maintainers".
My yaml is as follows:
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: hfeqm03-selfsigned-cert
namespace: mq
spec:
commonName: hfeqm03
…
Hugh Everett
- 11
- 3
0
votes
0 answers
How to make vault write request with Vault agent from a helm deployment?
I have a running vault server, I enabled transit secret engine and created a vault transit secret backend_key through terraform.
resource "vault_mount" "transit" {
path = "transit"
type = "transit"
}
resource "vault_transit_secret_backend_key"…
Bala krishna
- 519
- 1
- 10
- 24
0
votes
0 answers
How to invoke sonatype nexus docker insecure registry as a secret in kubernetes
Ex: docker registry url : registry.example.com:8056 within nexus docker (hosted). Need to configure this as a secret in kubernetes to pull images from the docker hosted registry.
I tried by adding insecure registry in the worker nodes on the path…
Jai Anand
- 1
- 1