Secret

Secret An architecture diagram generated by Archify. Secret · API object for sensitive data · Architecture component · kind: Secret Secret API object for sensitive data kind: Secret Pod · Injected as environment variables · Architecture component Pod Injected as environment variables Pod · Mounted as a volume · Architecture component Pod Mounted as a volume Pod · Authenticates to the registry · Architecture component Pod Authenticates to the registry Opaque · Default type · arbitrary data · Secret types (type) Opaque Default type · arbitrary data kubernetes.io/tls · TLS certificate and key · Secret types (type) kubernetes.io/tls TLS certificate and key kubernetes.io/dockerconfigjson · .docker/config.json · Secret types (type) kubernetes.io/dockerconfigjson .docker/config.json kubernetes.io/basic-auth · Basic auth credentials · Secret types (type) kubernetes.io/basic-auth Basic auth credentials base64 encoding · values in the data field · Storage method base64 encoding values in the data field etcd encryption · Optional (encryption at rest) · Storage method etcd encryption Optional (encryption at rest) Environment variables Volume mount Image pull secret encode store Secret types (type) Storage method Legend Pod (consumption) Storage method Secret Secret types

Used by Pods

  • • Environment variables: secretKeyRef / envFrom
  • • Volume mount: volumes.secret
  • • Image pull secret: imagePullSecrets

Other Secret types

  • • kubernetes.io/service-account-token
  • • kubernetes.io/dockercfg
  • • kubernetes.io/ssh-auth
  • • bootstrap.kubernetes.io/token

Storage method

  • • data: base64-encoded values
  • • stringData: provide unencoded values
  • • etcd encryption is optional