In K8S, how to use data from existed secret when creating new secret?
We got an existed secret in K8S(suppose it is "secret_1") and we want to write a yaml to create a new secret "secret_2", using some values from secret_1.
That is, in this yaml we'd like to
- Read values from other secret
- Store values to new secret
Is it possible to do this? It will be great help if a sample can be provided.
Thanks in advance.
templates
kubernetes kubernetes-helm 
helm asked Nov 24 '18 at 21:45
Lijing ZhangLijing Zhang
82
add a comment |
We got an existed secret in K8S(suppose it is "secret_1") and we want to write a yaml to create a new secret "secret_2", using some values from secret_1.
That is, in this yaml we'd like to
- Read values from other secret
- Store values to new secret
Is it possible to do this? It will be great help if a sample can be provided.
Thanks in advance.
templates
kubernetes kubernetes-helm helm asked Nov 24 '18 at 21:45
Lijing ZhangLijing Zhang
82
add a comment |
We got an existed secret in K8S(suppose it is "secret_1") and we want to write a yaml to create a new secret "secret_2", using some values from secret_1.
That is, in this yaml we'd like to
- Read values from other secret
- Store values to new secret
Is it possible to do this? It will be great help if a sample can be provided.
Thanks in advance.
templates
kubernetes kubernetes-helm helm asked Nov 24 '18 at 21:45
Lijing ZhangLijing Zhang
82
We got an existed secret in K8S(suppose it is "secret_1") and we want to write a yaml to create a new secret "secret_2", using some values from secret_1.
That is, in this yaml we'd like to
- Read values from other secret
- Store values to new secret
Is it possible to do this? It will be great help if a sample can be provided.
Thanks in advance.
templates
kubernetes kubernetes-helm helm templates
kubernetes kubernetes-helm helm asked Nov 24 '18 at 21:45
Lijing ZhangLijing Zhang
82
asked Nov 24 '18 at 21:45
Lijing ZhangLijing Zhang
82
asked Nov 24 '18 at 21:45
Lijing ZhangLijing Zhang
82
asked Nov 24 '18 at 21:45
Lijing ZhangLijing Zhang
82
asked Nov 24 '18 at 21:45
Lijing ZhangLijing Zhang
82
82
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
You cannot do this directly in YAML. You would need to write a script of some kind to do the steps you described, though you can use kubectl get secret -o yaml (or -o json) for a lot of the heavy lifting, possibly with jq for the reformatting.
answered Nov 24 '18 at 22:30
coderangercoderanger
30.3k32745
Thanks. I did something like " kubectl get secret <old-secret> -o json | jq '.data["<new-key>"]="<new_value>"' | kubectl apply -f - "
– Lijing Zhang
Nov 26 '18 at 2:37
👍 Sounds about like I expect :) You can also use Kustomize for some stuff like this, but I don't think you can use existing objects as a source so this is probably better anyway.
– coderanger
Nov 26 '18 at 5:45
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53462642%2fin-k8s-how-to-use-data-from-existed-secret-when-creating-new-secret%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
You cannot do this directly in YAML. You would need to write a script of some kind to do the steps you described, though you can use kubectl get secret -o yaml (or -o json) for a lot of the heavy lifting, possibly with jq for the reformatting.
answered Nov 24 '18 at 22:30
coderangercoderanger
30.3k32745
Thanks. I did something like " kubectl get secret <old-secret> -o json | jq '.data["<new-key>"]="<new_value>"' | kubectl apply -f - "
– Lijing Zhang
Nov 26 '18 at 2:37
👍 Sounds about like I expect :) You can also use Kustomize for some stuff like this, but I don't think you can use existing objects as a source so this is probably better anyway.
– coderanger
Nov 26 '18 at 5:45
add a comment |
You cannot do this directly in YAML. You would need to write a script of some kind to do the steps you described, though you can use kubectl get secret -o yaml (or -o json) for a lot of the heavy lifting, possibly with jq for the reformatting.
answered Nov 24 '18 at 22:30
coderangercoderanger
30.3k32745
Thanks. I did something like " kubectl get secret <old-secret> -o json | jq '.data["<new-key>"]="<new_value>"' | kubectl apply -f - "
– Lijing Zhang
Nov 26 '18 at 2:37
👍 Sounds about like I expect :) You can also use Kustomize for some stuff like this, but I don't think you can use existing objects as a source so this is probably better anyway.
– coderanger
Nov 26 '18 at 5:45
add a comment |
You cannot do this directly in YAML. You would need to write a script of some kind to do the steps you described, though you can use kubectl get secret -o yaml (or -o json) for a lot of the heavy lifting, possibly with jq for the reformatting.
answered Nov 24 '18 at 22:30
coderangercoderanger
30.3k32745
You cannot do this directly in YAML. You would need to write a script of some kind to do the steps you described, though you can use kubectl get secret -o yaml (or -o json) for a lot of the heavy lifting, possibly with jq for the reformatting.
answered Nov 24 '18 at 22:30
coderangercoderanger
30.3k32745
answered Nov 24 '18 at 22:30
coderangercoderanger
30.3k32745
answered Nov 24 '18 at 22:30
coderangercoderanger
30.3k32745
answered Nov 24 '18 at 22:30
coderangercoderanger
30.3k32745
30.3k32745
Thanks. I did something like " kubectl get secret <old-secret> -o json | jq '.data["<new-key>"]="<new_value>"' | kubectl apply -f - "
– Lijing Zhang
Nov 26 '18 at 2:37
👍 Sounds about like I expect :) You can also use Kustomize for some stuff like this, but I don't think you can use existing objects as a source so this is probably better anyway.
– coderanger
Nov 26 '18 at 5:45
add a comment |
Thanks. I did something like " kubectl get secret <old-secret> -o json | jq '.data["<new-key>"]="<new_value>"' | kubectl apply -f - "
– Lijing Zhang
Nov 26 '18 at 2:37
👍 Sounds about like I expect :) You can also use Kustomize for some stuff like this, but I don't think you can use existing objects as a source so this is probably better anyway.
– coderanger
Nov 26 '18 at 5:45
Thanks. I did something like " kubectl get secret <old-secret> -o json | jq '.data["<new-key>"]="<new_value>"' | kubectl apply -f - "
– Lijing Zhang
Nov 26 '18 at 2:37
Thanks. I did something like " kubectl get secret <old-secret> -o json | jq '.data["<new-key>"]="<new_value>"' | kubectl apply -f - "
– Lijing Zhang
Nov 26 '18 at 2:37
👍 Sounds about like I expect :) You can also use Kustomize for some stuff like this, but I don't think you can use existing objects as a source so this is probably better anyway.
– coderanger
Nov 26 '18 at 5:45
👍 Sounds about like I expect :) You can also use Kustomize for some stuff like this, but I don't think you can use existing objects as a source so this is probably better anyway.
– coderanger
Nov 26 '18 at 5:45
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53462642%2fin-k8s-how-to-use-data-from-existed-secret-when-creating-new-secret%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
