Questions tagged [kubernetes-secrets]

415 questions
3
votes
2 answers

Restrict access of a K8s secret to a particular service account

I have a secret which contains very sensitive information. I want to make sure that this secret can only be accessed by a certain service account and nobody else. Using RBAC, I can tell which user can access which resources. But is there some way…
3
votes
2 answers

Concating values from configMap and secret

I have a configMap file: apiVersion: v1 kind: ConfigMap metadata: labels: owner: testdb name: testdb-configmap data: host: postgres port: "5432" and a secret file: aapiVersion: v1 kind: Secret type: Opaque metadata: labels: …
Alpesh
  • 606
  • 6
  • 15
3
votes
1 answer

Kubernetes - How to Change SQL DB connection string with secret and use service hostname

I am new to Kubernetes but I have running docker-compose which basically deploys the Catalog API and Catalog DB. While working with docker-compose: I have used docker-compose.override.yaml to override the connection string from local to another…
Brijesh Shah
  • 573
  • 6
  • 18
3
votes
2 answers

How to pass azure key vault secrets to kubernetes pod using file in helm charts

I am using azure key vault to save secrets and use as env variables in deployment.yaml. but issue is I can see these secrets in azure kubernetes cluster in azure portal. I read in kubernetes documentation that we can use these variables as file…
3
votes
2 answers

Define/change Kubernetes SSH key file name in a YAML

I have a secret: apiVersion: v1 kind: Secret metadata: name: secret-ssh-auth type: kubernetes.io/ssh-auth data: ssh-privatekey: | SEVMTE9PT09PT09PT09PT09PT09PCg== and deployment: apiVersion: apps/v1 kind: Deployment metadata: name:…
mortymacs
  • 3,456
  • 3
  • 27
  • 53
3
votes
1 answer

GCP Firestore: Server request fails with Missing or insufficient permissions from GKE

I am trying to connect to Firestore from code running on GKE Container. Simple REST GET api is working fine, but when I access the Firestore from read/write, I am getting Missing or insufficient permissions. An unhandled exception was thrown by the…
3
votes
1 answer

How to create a secret in the k8s cluster from a pod's container?

I am deploying my application in kubernetes using helm chart with 2 sub-charts app and test. I have the pod of app chart properly running. But test pod will be running only if it can properly authenticate to app container. That means, i have to…
3
votes
2 answers

Failed to pull image repository does not exist or may require 'docker login':

I am receiving this error when starting a Pod Failed to pull image "docker-username/docker-private-repository:latest": rpc error: code = Unknown desc = Error response from daemon: pull access denied for docker-username/docker-private-repository,…
rmagnum2002
  • 11,341
  • 8
  • 49
  • 86
3
votes
3 answers

Can I create a kubernetes secret with the kubectl command using a .pfx certificate?

command below gives an error: error: flag key is required kubectl create secret tls k8-secret2 \ -n ingress-tls-test1 \ --cert ingress-tls-test1.pfx I am able to create the secret using .crt and .key file: kubectl create secret tls…
notageek27
  • 101
  • 1
  • 6
3
votes
1 answer

How to create a secret file in kubernetes

I have yaml which I used to create a secret using below command. kubectl create secret generic -n gitlab-openid-connect --from-file=provider=provider.yaml below is Provider.yaml: name: 'openid_connect' label: 'OpenID SSO Login' args: …
Umesh Kumar
  • 1,387
  • 2
  • 16
  • 34
3
votes
0 answers

How to inject secret value to Kubernetes crd?

I want to inject secret values to Kubernetes crd. For example, suppose I have Jaeger crd yaml file, and as the Elasticsearch server-url, password are secret values, I want them to be injected using Vault. When using Deployment, I can inject the…
Piljae Chae
  • 987
  • 10
  • 23
3
votes
2 answers

Using a certificate from Azure Keyvault as a kubernetes secret

I've a certificate (pfx) in my Azure KeyVault - I use that certificate as a secret (deployed via Azure DevOps using Helm). The problem I've encountered is that the certificate is somehow incorrectly read from KeyVault (I use Variable Group) - the…
macpak
  • 1,190
  • 1
  • 14
  • 28
3
votes
1 answer

Does Gitlab AutoDevops support kubernetes secrets as file?

I am trying out GitLab AutoDevOps, and trying to understand how CI/CD variables work. In the Settings UI I can set create file and environment variables. According to the documentation, if an variable is prefixed with K8S_SECRET_ then it appears…
mikelong
  • 3,694
  • 2
  • 35
  • 40
3
votes
3 answers

Is it possible to create a string array secret in k8s?

I'm trying to store a string array as a secret; I have this secrets.yml file that I'm using in my local environment and works perfectly (values are for explanation purposes only): secrets.yml passwordz: - pass_001 - pass_002 - pass_003 The…
Cas1337
  • 141
  • 15
3
votes
2 answers

use kubernetes secret in another one

How can I use secret X key my-key in an other secret Y as some-other-key? Both secrets have other keys as well. Rational: The mysql instance generates a secret containing the passwords for the users with keys mysql-password and…
simohe
  • 613
  • 7
  • 20