Templating Kubernetes Secret Resources
Rendering Secret objects without leaking values.
Charts Can Render Secrets
Sometimes your chart must produce a Kubernetes Secret object itself. Done carefully, you can template one without leaking the value.
The Secret Manifest Shape
A Kubernetes Secret is just a manifest with a data section. Each value under data must be Base64-encoded text.
apiVersion: v1
kind: Secret
metadata:
name: db-credentialsAll lessons in this course
- Why Secrets Do Not Belong in values.yaml
- Encrypting Values with helm-secrets and SOPS
- Pulling from External Secrets Operators
- Templating Kubernetes Secret Resources