This message was deleted.

sparse-intern-71089

04/04/2023, 3:50 PM

This message was deleted.

billowy-army-68599

04/04/2023, 3:51 PM

you need to base64 encode it, or use

stringData

glamorous-australia-21342

04/04/2023, 3:52 PM

Ah I see. I figured kubernetes automatically encoded plain text into base64 as a secret?

billowy-army-68599

04/04/2023, 3:52 PM

that’s what

stringData

does

glamorous-australia-21342

04/04/2023, 3:52 PM

Ahhh thank you! 🙏

glamorous-australia-21342

04/04/2023, 3:52 PM

What is the point of just

data

then?

billowy-army-68599

04/04/2023, 3:56 PM

not everyone wants to have k8s encode the data, often people want to encode it themselves 🙂

glamorous-australia-21342

04/04/2023, 3:56 PM

I see. So you're suggesting you could use a different encoding scheme or people want to trust their own base64 encoding?

many-telephone-49025

04/07/2023, 8:27 AM

hi @glamorous-australia-21342, I highly suggest you, to use a secret controller like

external-secrets

for Kubernetes secret management. Depending on where you run your k8s cluster you may have a managed service for that.

able-crayon-21563

04/09/2023, 10:06 PM

@glamorous-australia-21342 you must use base64 encoding for any value in

data

. The

stringData

field is provided for convenience, to have the API server perform the encoding for you. Same result. https://kubernetes.io/docs/concepts/configuration/secret/#restriction-names-data

👍 1

88 Views

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.