Secret types

Learn Opaque and docker-registry Secret types.

Secret types

A Secret's type field determines the content's format, and Kubernetes validates some types:

Opaque (generic): free key-value; the most common.
kubernetes.io/tls: tls.crt and tls.key; for Ingress TLS.
kubernetes.io/dockerconfigjson: for pulling images from a private registry.
kubernetes.io/service-account-token: a ServiceAccount token.

kubectl create secret tls web-tls --cert=sertifika.crt --key=anahtar.key
kubectl create secret docker-registry ghcr-giris \
  --docker-server=ghcr.io --docker-username=ali --docker-password="$GHCR_TOKEN"

imagePullSecrets

The registry Secret is given in the pod spec with imagePullSecrets. It can also be added to the ServiceAccount for all pods in the same namespace:

    spec:
      imagePullSecrets:
        - name: ghcr-giris
      containers:
        - name: api
          image: ghcr.io/ali/api:1.0

kubectl patch serviceaccount default -p '{"imagePullSecrets":[{"name":"ghcr-giris"}]}'

Exercise Pull from a private registry

Write a pod YAML: name api; ghcr-giris under imagePullSecrets; container named api, image ghcr.io/ali/api:1.0.

Show example solution

apiVersion: v1
kind: Pod
metadata:
  name: api
spec:
  imagePullSecrets:
    - name: ghcr-giris
  containers:
    - name: api
      image: ghcr.io/ali/api:1.0

Test yourself

With which field does a pod refer to a Secret to pull an image from a private registry?
- registrySecret
- imagePullSecrets
- envFrom
- volumes
Show answer

imagePullSecrets — The Secret must be of type kubernetes.io/dockerconfigjson.

Create a TLS-type Secret.

kubectl create secret ____ web-tls --cert=sertifika.crt --key=anahtar.key

Show answer

kubectl create secret tls web-tls --cert=sertifika.crt --key=anahtar.key

Match the types.

Opaque

Free key-value
kubernetes.io/tls

Certificate and key
dockerconfigjson

Registry login
service-account-token

ServiceAccount token

Next lesson: Secret YAML

We Are Enhancing Your Experience

Cookie Preferences

Strictly Necessary Cookies

Analytical Cookies