kind: Secret

• https://kubernetes.io/docs/concepts/configuration/secret/

• key terminology in kind: Secret referes to different fields inside the data: field

Types

https://kubernetes.io/docs/concepts/configuration/secret/#secret-types

 Opaque	                                 arbitrary user-defined data
kubernetes.io/service-account-token	ServiceAccount token
kubernetes.io/dockercfg	                serialized ~/.dockercfg file
kubernetes.io/dockerconfigjson	        serialized ~/.docker/config.json file
kubernetes.io/basic-auth	        credentials for basic authentication
kubernetes.io/ssh-auth	                credentials for SSH authentication
kubernetes.io/tls	                data for a TLS client or server
bootstrap.kubernetes.io/token	        bootstrap token data
istio.io/key-and-cert

Examples

https://kubernetes.io/docs/tasks/access-application-cluster/access-cluster/

kubectl apply -f - <<EOF
apiVersion: v1
kind: Secret
metadata:
  name: default-token
  annotations:
    kubernetes.io/service-account.name: default
type: kubernetes.io/service-account-token
EOF

https://kubernetes.io/docs/tasks/inject-data-application/distribute-credentials-secure/#create-a-secret

apiVersion: v1
kind: Secret
metadata:
  name: test-secret
data:
  username: bXktYXBw
  password: Mzk1MjgkdmRnN0pi

Official example

apiVersion: v1
kind: Secret
metadata:
  name: secret-basic-auth
type: kubernetes.io/basic-auth
stringData:
  username: admin # required field for kubernetes.io/basic-auth
  password: t0p-Secret # required field for kubernetes.io/basic-auth

Related

• secret.yml
• kubectl create secret
• Pull an Image from a Private Registry in Kubernetes
• 1password Kubernetes operator
• key

See also

• kind: Secret: type: Opaque
• Kubernetes secrets: types, kubectl [ get | create | describe | delete | secret ] secrets, secret.yml, kind: Secret, secretKeyRef, default-token, imagePullSecrets:, kubernetes.io/dockerconfigjson, External Secrets Operator ( kind: ExternalSecret), Kubeseal
• kubectl get secret, kind: Secret, kubernetes.io/tls