Secret types (Opaque, docker-registry, TLS) in Kubernetes - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is an Opaque secret in Kubernetes?

An Opaque secret is the default secret type in Kubernetes. It stores arbitrary user-defined data as key-value pairs, such as passwords or tokens, in base64 encoded form.

beginner

What is the purpose of a docker-registry secret in Kubernetes?

A docker-registry secret stores credentials for accessing private container registries. It allows Kubernetes to pull private images securely using stored username, password, email, and server URL.

beginner

What does a TLS secret contain in Kubernetes?

A TLS secret contains a private key and a certificate used for TLS encryption. It is commonly used to secure communication between clients and servers inside Kubernetes.

intermediate

How do you create an Opaque secret using kubectl?

Use the command: <br>kubectl create secret generic my-secret --from-literal=key1=value1 --from-literal=key2=value2<br>This creates an Opaque secret named 'my-secret' with two key-value pairs.

beginner

Which secret type would you use to store a TLS certificate and key?

You would use the TLS secret type because it is designed to hold a certificate and private key for secure communication.

What is the default secret type in Kubernetes?

A ServiceAccountToken

B docker-registry

C TLS

D Opaque

Opaque is the default secret type used to store arbitrary key-value pairs.

Which secret type is used to store Docker registry credentials?

A docker-registry

B TLS

C Opaque

D BasicAuth

The docker-registry secret stores credentials for private container registries.

What data does a TLS secret contain?

A Certificate and private key

B Username and password

C API tokens

D Config maps

TLS secrets hold a certificate and private key for encrypted communication.

How do you create an Opaque secret with literal values?

A kubectl create secret docker-registry

B kubectl create secret generic --from-literal

C kubectl create secret tls

D kubectl create configmap

Use 'kubectl create secret generic' with --from-literal to create an Opaque secret.

Which secret type is best for storing a private key and certificate for HTTPS?

A Opaque

B docker-registry

C TLS

D BasicAuth

TLS secret type is designed for storing certificates and private keys.

Explain the differences between Opaque, docker-registry, and TLS secret types in Kubernetes.

Think about what kind of data each secret type holds and why.

Describe how you would create and use a docker-registry secret to pull a private image.

Focus on the command and how Kubernetes uses the secret.