K8S 创建和查看secret(九)

yaml中的用户密码敏感信息一般都会采用密码存储
采用base64编码进行加密

[root@hz-95 pv]# echo -n guang | base64
emd1YW5nag==
[root@hz-95 pv]# echo -n 1q2w#E$R | base64

cat secret.ymal

apiVersion: v1
kind: Secret
metadata:
  name: mysecret2
data:
  username: emd1YW5nag==
  password: MXEydyNF

kubectl get secret #查看已经存在的secret

[root@hz-95 pv]# kubectl get secret
NAME         TYPE                      DATA      AGE
mysecret     Opaque                    2         40m
mysecret1    Opaque                    2         29m
mysecret2    Opaque                    2         5m
mysql-pass   Opaque                    1         1d
regcred      kubernetes.io/dockercfg   1         1d

kubectl describe secret查看具体条目的key

[root@hz-95 pv]# kubectl describe secret mysql-pass
Name:           mysql-pass
Namespace:      default
Labels:         <none>
Annotations:    <none>

Type:   Opaque

Data
====
password:       6 bytes

如果想看具体的value,使用kubectl edit secret mysql-pass

apiVersion: v1
data:
  password: MTIzNDU2
kind: Secret
metadata:
  creationTimestamp: 2019-12-15T08:05:05Z
  name: mysql-pass
  namespace: default
  resourceVersion: "2607300"
  selfLink: /api/v1/namespaces/default/secrets/mysql-pass
  uid: 9aafd7e2-1f11-11ea-838f-001a4a060061
type: Opaque

然后进行base64反编码

[root@hz-sb-zrrwt-199-150-95 pv]# echo -n MTIzNDU2 | base64 --decode
123456