Difference between revisions of "Kubernetes.io/dockerconfigjson"
Jump to navigation
Jump to search
↑ https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/#registry-secret-existing-credentials
(8 intermediate revisions by the same user not shown) | |||
Line 1: | Line 1: | ||
{{lc}} | {{lc}} | ||
+ | A Kubernetes cluster uses the [[Secret]] of [[kubernetes.io/dockerconfigjson]] type to authenticate with a [[container registry]] to pull a [[private image]]. | ||
+ | |||
+ | [[kubectl create secret generic]] regcred --from-file=.dockerconfigjson=<path/to/.docker/config.json> --type=[[kubernetes.io/dockerconfigjson]] <ref>https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/#registry-secret-existing-credentials</ref> | ||
+ | |||
{{Secret types TOC}} | {{Secret types TOC}} | ||
− | + | == Related == | |
+ | * [[Pull an Image from a Private Registry]] | ||
+ | * [[Create a Secret based on existing credential]] | ||
+ | * <code>[[~/.docker/config.json]]</code> | ||
== See also == | == See also == | ||
* {{docker config}} | * {{docker config}} | ||
* {{K8s secrets}} | * {{K8s secrets}} | ||
+ | * {{kubernetes.io}} | ||
[[Category:K8s]] | [[Category:K8s]] |
Latest revision as of 20:54, 17 July 2024
A Kubernetes cluster uses the Secret of kubernetes.io/dockerconfigjson type to authenticate with a container registry to pull a private image.
kubectl create secret generic regcred --from-file=.dockerconfigjson=<path/to/.docker/config.json> --type=kubernetes.io/dockerconfigjson [1]
Opaque arbitrary user-defined data kubernetes.io/service-account-token ServiceAccount token kubernetes.io/dockercfg serialized ~/.dockercfg file kubernetes.io/dockerconfigjson serialized ~/.docker/config.json file kubernetes.io/basic-auth credentials for basic authentication kubernetes.io/ssh-auth credentials for SSH authentication kubernetes.io/tls data for a TLS client or server bootstrap.kubernetes.io/token bootstrap token data istio.io/key-and-cert
Related[edit]
- Pull an Image from a Private Registry
- Create a Secret based on existing credential
~/.docker/config.json
See also[edit]
docker config
,~/.docker/config.json, CredsStore, CredHelpers
- Kubernetes secrets:
kubectl [ get | create | describe | delete | secret ] secrets
,secret.yml, kind: Secret, secretKeyRef, default-token, imagePullSecrets:, kubernetes.io/dockerconfigjson
kubernetes.io
: (app | ingress | kubectl | bootstrap | beta | role | pv | annotations | topology )
,k8s.io, kubernetes.io/ [ /tls | /ingress.class | /pvc-protection | /enforce-mountable-secrets | /dockerconfigjson ]
Advertising: