Creating Secrets in Kubernetes - Quick Revision & Summary

Recall & Review

beginner

What is a Kubernetes Secret?

A Kubernetes Secret is a way to store and manage sensitive information, like passwords or keys, separately from application code. It helps keep secrets safe and out of plain sight.

beginner

How do you create a secret from literal values using kubectl?

Use the command: <br>kubectl create secret generic my-secret --from-literal=username=admin --from-literal=password=12345<br>This creates a secret named 'my-secret' with username and password stored.

intermediate

What is the difference between 'generic' and 'docker-registry' secret types?

'generic' is for general secrets like passwords or tokens.<br>'docker-registry' is specifically for storing Docker registry credentials to pull private images.

beginner

How can you create a secret from a file?

Use the command:<br>kubectl create secret generic my-secret --from-file=path/to/file<br>This stores the file content as a secret value.

beginner

Why should secrets not be stored in plain text in configuration files?

Storing secrets in plain text risks exposing sensitive data if files are shared or accessed by unauthorized users. Using Kubernetes Secrets helps keep them encoded and managed securely.

Which command creates a Kubernetes secret from literal values?

A kubectl create secret generic my-secret --from-literal=key=value

B kubectl apply secret my-secret --from-literal=key=value

C kubectl secret create my-secret --literal=key=value

D kubectl secret generic create my-secret --from-literal=key=value

The correct syntax is 'kubectl create secret generic' followed by the secret name and '--from-literal' options.

What type of secret is used to store Docker registry credentials?

A tls

B generic

C docker-registry

D opaque

'docker-registry' type is designed specifically for Docker registry credentials.

How can you create a secret from a file named 'config.txt'?

A kubectl create secret generic my-secret --from-file=config.txt

B kubectl create secret file my-secret config.txt

C kubectl secret create my-secret --file=config.txt

D kubectl apply secret generic my-secret --file=config.txt

The correct command uses '--from-file' to create a secret from a file.

Why is it better to use Kubernetes Secrets instead of storing passwords in plain text files?

A Plain text files are more secure.

B Secrets are automatically encrypted and managed securely.

C Secrets are visible to all users by default.

D Plain text files are faster to access.

Kubernetes Secrets help keep sensitive data encoded and managed securely, unlike plain text files.

Which command shows the details of a secret in Kubernetes?

A kubectl secret info my-secret

B kubectl get secret my-secret -o yaml

C kubectl show secret my-secret

D kubectl describe secret my-secret

'kubectl describe secret' shows detailed information about the secret.

Explain how to create a Kubernetes secret from literal values and why it is useful.

Think about commands and the purpose of secrets.

Describe the difference between generic secrets and docker-registry secrets in Kubernetes.

Consider what each secret type stores.