kubernetes.io/tls

kubernetes.io/tls secret type

kubectl get secrets -A --field-selector type=kubernetes.io/tls

kubectl get secret your-tls-certificate -o jsonpath='{.data.tls\.crt}' | base64 --decode | openssl x509 -text -noout

Kubernetes Secret Types

Opaque	                                 arbitrary user-defined data
kubernetes.io/service-account-token	ServiceAccount token
kubernetes.io/dockercfg	                serialized ~/.dockercfg file
kubernetes.io/dockerconfigjson	        serialized ~/.docker/config.json file
kubernetes.io/basic-auth	        credentials for basic authentication
kubernetes.io/ssh-auth	                credentials for SSH authentication
kubernetes.io/tls	                data for a TLS client or server
bootstrap.kubernetes.io/token	        bootstrap token data
istio.io/key-and-cert

Related

• NGINX Ingress Controller SSL/TLS termination
• ingress.tls
• spec.tls
• kubectl create secret tls
• kubernetes.io

 enterpriseGateway.ingress.tls | list | `[{"hosts":["gateway.gem.example.com"],"secretName":"gem-gateway-tls"}]` | TLS configuration for the gateway ingress |

See also

• kubernetes.io/tls, kubectl create secret tls, kubectl describe secret your-tls-certificate
• spec.tls, acme.cert-manager.io/http01-edit-in-place, kubernetes.io/tls secret type
• Kubernetes Secret Types: tls, Opaque