kind: Secret

https://kubernetes.io/docs/concepts/configuration/secret/#secret-types

type: Opaque
type: kubernetes.io/service-account-token

https://kubernetes.io/docs/concepts/configuration/secret/#secret-types

Opaque	                                 arbitrary user-defined data
kubernetes.io/service-account-token	ServiceAccount token
kubernetes.io/dockercfg	                serialized ~/.dockercfg file
kubernetes.io/dockerconfigjson	        serialized ~/.docker/config.json file
kubernetes.io/basic-auth	        credentials for basic authentication
kubernetes.io/ssh-auth	                credentials for SSH authentication
kubernetes.io/tls	                data for a TLS client or server
bootstrap.kubernetes.io/token	        bootstrap token data

Example

https://kubernetes.io/docs/tasks/access-application-cluster/access-cluster/

kubectl apply -f - <<EOF
apiVersion: v1
kind: Secret
metadata:
  name: default-token
  annotations:
    kubernetes.io/service-account.name: default
type: kubernetes.io/service-account-token
EOF

Related

• secret.yml
• kubectl create secret

See also

• Kubernetes secrets: kubectl [ get | create | describe | delete | secret ] secrets, secret.yml, kind: Secret, secretKeyRef, default-token, imagePullSecrets:, kubernetes.io/dockerconfigjson
• kind: [ Pod | Ingress | ClusterConfiguration | Config | ConfigMap | ServiceAccount | Deployment | List | Secret | Status ], spec: metadata: data: