Questions tagged [kubernetes-secrets]

415 questions
0
votes
1 answer

What would need to be done to access Kubernetes secret from another namespace via an environment variable

I saw many answers and many articles on the internet saying it's not possible to access the secrets of other namespaces. However, the answer provided in another question How allow pod from default namespace, read secret from other namespace suggests…
0
votes
0 answers

Why Kubernetes secrets are secure?

When we can decode the base 64 values of Kubernetes Secrets, why they're considered to store confidential information? Please help me to understand this
Vasu Youth
  • 323
  • 3
  • 13
0
votes
0 answers

Mongodb secret password change not applied in Kubernetes

After I changed the MongoDB secret password in Kubernetes I couldn't connect to the MongoDB database then I do some of the below tasks but nothing of them resolved my problem ... rollout restart & scale down all services that use this secret to…
0
votes
1 answer

To read secret from etcd in AKS using etcdctl throws Error: open /etc/kubernetes/pki/apiserver-etcd-client.crt: no such file or directory

To read secret from etcd in AKS Cluster, Used below command ETCDCTL_API=3 etcdctl --endpoints= --cert=/etc/kubernetes/pki/apiserver-etcd-client.crt --key=/etc/kubernetes/pki/apiserver-etcd-client.key get / --prefix --keys-only Error: open…
0
votes
1 answer

How do I use the secrets in a secretproviderclass in my mounted azure fileshare?

Currently, I'm mounting a fileshare in my deployments through: volumeMounts: - mountPath: /new-folder name: new-mount readOnly: true and - azureFile: secretName: secret_name123 …
0
votes
0 answers

How Do I Access My k8 Secret File From Directory of Go Server

I currently have a Go app running in k8 pod. I want to access my secret file inside my app and save them in a variable. The secret files are located at /etc/secrets which is the mountPath. How do I even get to access that folder?
Jam1
  • 629
  • 12
  • 25
0
votes
1 answer

Is there a clean way to provide env var overrides using defaults, configmap, secrets, and command-line options?

We have some services that can be installed in multiple locations with differing configurations. We've been asked to support multi-level configuration options using environment variables set with defaults, configmaps, secrets, and command-line…
0
votes
0 answers

Terraform kubernetes service account and role binding modules not working

I am trying to create a kubernetes service account in a created namespace, which will have a secret and a cluster role binding, however, even though the terraform plan and apply stage shows that is is being created, it isn't, please see below module…
0
votes
0 answers

Referencing KMS encrypted kubernetes secret in spring boot, application.yaml

lets say I have a kubernetes secret like: apiVersion: v1 kind: Secret metadata: name: mysecret type: Opaque data: USER_NAME: YWRtaW4= PASSWORD: MWYyZDFlMmU2N2Rm When USER_NAME and PASSWORD are within the running Pod. They are KMS…
Josh
  • 127
  • 1
  • 8
0
votes
1 answer

Create Secret (k8s) with Pulumi and Typescript

I want to create a secret with Pulumi in Typescript it should contain the following data: remote_write: - url: "example.com" basic_auth: username: "user" password: "XXX" the code looks like: const databaseSecret…
0
votes
0 answers

How to update Grafana password automatically using k8s Secret

I have Grafana deployed on the EKS. The login password for Grafana comes from the AWS secret manager. The first time Grafana is deployed, it fetches the secret from AWS secret manager, creates a k8s secret and uses the created k8s secret as the…
0
votes
2 answers

Terraform Kubernetes Secrets not applying due to Namespace

I am learning terraform and trying to translate kubernetes infrastructure over to terraform. I have a terraform script which creates a given namespace, and then creates secrets from local files. Most of the files do not create properly due to the…
0
votes
1 answer

Generate RSA private-public key pair using Helm

Helm allows generating a new RSA 4096 private key using the genPrivateKey function which I use to generate a key and store it in a K8s secret. How can I use Helm to create a public key for the generated private key?
user1116377
  • 629
  • 3
  • 15
  • 31
0
votes
2 answers

ArgoCD : resource already exists and is not managed by SealedSecret

I create sealedsecret from dockercondigjson secret. Created secret displayed in kubectl sealed secrets. But, I have message in ArgoCD, in events of sealedsecret: failed update: Resource "mysecret" already exists and not managed by…
0
votes
1 answer

Mounting a keystore for running an SCDF task

I have an SCDF task that reads information from a database and outputs messages to Kafka. For connecting to Kafka I have a private + public key pair stored in a PKCS12 keystore. Usually, when I have a regular app running as a pod in Kubernetes, I…