Questions tagged [kubernetes-secrets]

415 questions
0
votes
1 answer

How to use secrets mounted on AKS

I followed this setup guide on how to Integrate Azure Key Vault with Kubernetes. The setup was successful, my problem now is how to use those secrets that are mounted in AKS? The following code in my .net application doesn't seem to work. It doesn't…
0
votes
1 answer

consul StatefulSet failing

I am trying to deploy consul using kubernetes StatefulSet with following manifest --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: consul labels: app: consul rules: - apiGroups: [""] resources: -…
roy
  • 6,344
  • 24
  • 92
  • 174
0
votes
0 answers

kubernetes deploy a pod with versioned secret

I want to use k8s secret but I have many question. I updated a secret and I want to run just new image pods with this secret. Any pods can be down and New pod can be start with this new secret before I don't apply new image. How can I run old image…
RAK
  • 11
  • 1
0
votes
2 answers

Environmental variables returning undefined for Kubernetes deployment

I posted a question similar to this and tried to implement what the answer for this question said: How to access Kubernetes container environment variables from Next.js application? However, when I still call my environment variables doing…
0
votes
2 answers

The value of argocd-secret is further encoded to base64

When managing secrets in argocd, I encode the value in argocd-secret with base64 and set it to manifest. In that case, although I use kusotomize, build and apply it, secret encoded by base64 will be encoded to base64 further. $ echo -n "clientid" |…
jadejoe
  • 663
  • 2
  • 13
  • 24
0
votes
0 answers

Kubernetes secret getting corrupted

I am trying to create a secret with a file of type Oracle wallet - cwallet.sso file. But I noticed that, the checksum of the mounted file is not same as the original file. As a result, I am unable to connect to db. I am trying to create secret…
Anjana
  • 1
  • 4
0
votes
1 answer

Secret is not decoding properly using Kubernetes Secrets

I am using Kubernetes to deploy my grafana dashboard and I am trying to use Kubernetes Secrets for saving grafana admin-password .. Here is my yaml file for secret apiVersion: v1 kind: Secret metadata: name:…
Pratheesh
  • 565
  • 4
  • 19
0
votes
1 answer

generate dynamic secret name inside kubernetes deployment file

I have 2 secrets i.e. production and staging. I want to dynamically load this secret in deployment file using the environment variable being set in same file env: - name: NODE_ENV value: "production" - name: general-secret …
Hacker
  • 7,798
  • 19
  • 84
  • 154
0
votes
1 answer

Difference between Kubernetes Service Account Tokens from secret and projected volume

When I do kubectl get secret my-sa-token-lr928 -o yaml, there is a base64 string(JWT A) value for data.token. There are other fields too, like data.ca.crt in this returned secret. When I use projected volume with source serviceAccountToken and read…
0
votes
1 answer

How to add cert in Pod?

How to add another root-certificate to this file /var/run/secrets/kubernetes.io/serviceaccount/ca.crt (in pod fs) that signed the kubernetes root-certificate ? That is, there should always be two certificates when mounting the Pod. Thank you.
0
votes
2 answers

Kubernetes Secrets Auto Delete

I am wondering about Kubernetes's secret management. I have a process that generates a lot of secrets that only need to live for a short while. I would like for these secrets to come from Vault or a similar service in the future. However, for right…
Aaron
  • 131
  • 2
  • 12
0
votes
1 answer

Want to restrict namespace users accessing TLS secrets in RBAC Enabled AKS Cluster

I want to restrict users under RBAC AKS/kubernetes cluster namespace to fetch only secrets but not TLS secrets. I have my cluster role with the following api permissions. But it does not work iam unable to restrict users from fetching only secrets…
0
votes
1 answer

How to mount a secret to kubernetes StatefulSet

So, looking at the Kubernetes API documentation: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.17/#statefulsetspec-v1-apps it appears that I can indeed have a volume because it uses a podspec and the podspec does have a volume…
MooreGuy
  • 13
  • 1
  • 4
0
votes
1 answer

Saving Join Command in Server Memory generated from kubeadm init

I want to manage servers and configure them with ansible. After creating a join command with kubeadm, I want to save the command in the controller machine RAM. And, saving the secret join command locally on the controller machine is problematic for…
0
votes
1 answer

Kubernetes Application Level Encryption on GKE

I aim to enable Application Level Encryption on my GKE cluster. I am using a custom service account (with required permissions to Encrypt/Decrypt a KMS key) to create this cluster, but it still asks me to grant Encrypt/Decrypt permissions to my…