kind: Secret

Types

https://kubernetes.io/docs/concepts/configuration/secret/#secret-types

 Opaque	                                 arbitrary user-defined data
kubernetes.io/service-account-token	ServiceAccount token
kubernetes.io/dockercfg	                serialized ~/.dockercfg file
kubernetes.io/dockerconfigjson	        serialized ~/.docker/config.json file
kubernetes.io/basic-auth	        credentials for basic authentication
kubernetes.io/ssh-auth	                credentials for SSH authentication
kubernetes.io/tls	                data for a TLS client or server
bootstrap.kubernetes.io/token	        bootstrap token data
istio.io/key-and-cert

Examples

https://kubernetes.io/docs/tasks/access-application-cluster/access-cluster/

kubectl apply -f - <<EOF
apiVersion: v1
kind: Secret
metadata:
  name: default-token
  annotations:
    kubernetes.io/service-account.name: default
type: kubernetes.io/service-account-token
EOF

https://kubernetes.io/docs/tasks/inject-data-application/distribute-credentials-secure/#create-a-secret

apiVersion: v1
kind: Secret
metadata:
  name: test-secret
data:
  username: bXktYXBw
  password: Mzk1MjgkdmRnN0pi

Related

• secret.yml
• kubectl create secret
• Pull an Image from a Private Registry in Kubernetes
• 1password Kubernetes operator

See also

• Kubernetes secrets: kubectl [ get | create | describe | delete | secret ] secrets, secret.yml, kind: Secret, secretKeyRef, default-token, imagePullSecrets:, kubernetes.io/dockerconfigjson
• kind: [ Pod | Ingress | ClusterConfiguration | Config | ConfigMap | ServiceAccount | Deployment | List | Secret | Status ], spec: metadata: data: