Questions tagged [kubernetes-secrets]
415 questions
3
votes
2 answers
Restrict access of a K8s secret to a particular service account
I have a secret which contains very sensitive information.
I want to make sure that this secret can only be accessed by a certain service account and nobody else.
Using RBAC, I can tell which user can access which resources. But is there some way…

codego123
- 171
- 2
- 12
3
votes
2 answers
Concating values from configMap and secret
I have a configMap file:
apiVersion: v1
kind: ConfigMap
metadata:
labels:
owner: testdb
name: testdb-configmap
data:
host: postgres
port: "5432"
and a secret file:
aapiVersion: v1
kind: Secret
type: Opaque
metadata:
labels:
…

Alpesh
- 606
- 6
- 15
3
votes
1 answer
Kubernetes - How to Change SQL DB connection string with secret and use service hostname
I am new to Kubernetes but I have running docker-compose which basically deploys the Catalog API and Catalog DB.
While working with docker-compose:
I have used docker-compose.override.yaml to override the connection string from local to another…

Brijesh Shah
- 573
- 6
- 18
3
votes
2 answers
How to pass azure key vault secrets to kubernetes pod using file in helm charts
I am using azure key vault to save secrets and use as env variables in deployment.yaml.
but issue is I can see these secrets in azure kubernetes cluster in azure portal.
I read in kubernetes documentation that we can use these variables as file…

megha
- 621
- 2
- 11
- 36
3
votes
2 answers
Define/change Kubernetes SSH key file name in a YAML
I have a secret:
apiVersion: v1
kind: Secret
metadata:
name: secret-ssh-auth
type: kubernetes.io/ssh-auth
data:
ssh-privatekey: |
SEVMTE9PT09PT09PT09PT09PT09PCg==
and deployment:
apiVersion: apps/v1
kind: Deployment
metadata:
name:…

mortymacs
- 3,456
- 3
- 27
- 53
3
votes
1 answer
GCP Firestore: Server request fails with Missing or insufficient permissions from GKE
I am trying to connect to Firestore from code running on GKE Container. Simple REST GET api is working fine, but when I access the Firestore from read/write, I am getting Missing or insufficient permissions.
An unhandled exception was thrown by the…

skjagini
- 3,142
- 5
- 34
- 63
3
votes
1 answer
How to create a secret in the k8s cluster from a pod's container?
I am deploying my application in kubernetes using helm chart with 2 sub-charts app and test.
I have the pod of app chart properly running.
But test pod will be running only if it can properly authenticate to app container.
That means, i have to…

AnjK
- 2,887
- 7
- 37
- 64
3
votes
2 answers
Failed to pull image repository does not exist or may require 'docker login':
I am receiving this error when starting a Pod
Failed to pull image "docker-username/docker-private-repository:latest": rpc error: code = Unknown desc = Error response from daemon: pull access denied for docker-username/docker-private-repository,…

rmagnum2002
- 11,341
- 8
- 49
- 86
3
votes
3 answers
Can I create a kubernetes secret with the kubectl command using a .pfx certificate?
command below gives an error: error: flag key is required
kubectl create secret tls k8-secret2 \
-n ingress-tls-test1 \
--cert ingress-tls-test1.pfx
I am able to create the secret using .crt and .key file:
kubectl create secret tls…

notageek27
- 101
- 1
- 6
3
votes
1 answer
How to create a secret file in kubernetes
I have yaml which I used to create a secret using below command.
kubectl create secret generic -n gitlab-openid-connect --from-file=provider=provider.yaml
below is Provider.yaml:
name: 'openid_connect'
label: 'OpenID SSO Login'
args:
…

Umesh Kumar
- 1,387
- 2
- 16
- 34
3
votes
0 answers
How to inject secret value to Kubernetes crd?
I want to inject secret values to Kubernetes crd. For example, suppose I have Jaeger crd yaml file, and as the Elasticsearch server-url, password are secret values, I want them to be injected using Vault. When using Deployment, I can inject the…

Piljae Chae
- 987
- 10
- 23
3
votes
2 answers
Using a certificate from Azure Keyvault as a kubernetes secret
I've a certificate (pfx) in my Azure KeyVault - I use that certificate as a secret (deployed via Azure DevOps using Helm). The problem I've encountered is that the certificate is somehow incorrectly read from KeyVault (I use Variable Group) - the…

macpak
- 1,190
- 1
- 14
- 28
3
votes
1 answer
Does Gitlab AutoDevops support kubernetes secrets as file?
I am trying out GitLab AutoDevOps, and trying to understand how CI/CD variables work.
In the Settings UI I can set create file and environment variables.
According to the documentation, if an variable is prefixed with K8S_SECRET_ then it appears…

mikelong
- 3,694
- 2
- 35
- 40
3
votes
3 answers
Is it possible to create a string array secret in k8s?
I'm trying to store a string array as a secret; I have this secrets.yml file that I'm using in my local environment and works perfectly (values are for explanation purposes only):
secrets.yml
passwordz:
- pass_001
- pass_002
- pass_003
The…

Cas1337
- 141
- 15
3
votes
2 answers
use kubernetes secret in another one
How can I use secret X key my-key in an other secret Y as some-other-key? Both secrets have other keys as well.
Rational:
The mysql instance generates a secret containing the passwords for the users with keys mysql-password and…

simohe
- 613
- 7
- 20