Kubernetes(k8s)的Secret以密文的方式存储数据

1.用--from-env-file来创建Secret,需要创建一个env.txt(文件)来存储数据

# cat << EOF > env.txt
> username=admin
> password=123456
> EOF

2.创建Secret 

# kubectl  create secret generic mysecret --from-env-file=env.txt
secret/mysecret created

3.查看Secret

# kubectl get secret
NAME                  TYPE                                  DATA   AGE
default-token-ljtmm   kubernetes.io/service-account-token   3      16h
mysecret              Opaque                                2      3h11m

4.查看mysecret详细信息

# kubectl  describe secret mysecret
Name:         mysecret
Namespace:    default
Labels:       <none>
Annotations:  <none>

Type:  Opaque

Data
====
password:  6 bytes
username:  5 bytes

5.编辑mysecret

# kubectl edit secret mysecret

# Please edit the object below. Lines beginning with a '#' will be ignored,
# and an empty file will abort the edit. If an error occurs while saving this file will be
# reopened with the relevant failures.
#
apiVersion: v1
data:
  password: MTIzNDU2
  username: YWRtaW4=
kind: Secret
metadata:
  creationTimestamp: "2020-04-12T03:44:35Z"
  name: mysecret
  namespace: default
  resourceVersion: "9519"
  selfLink: /api/v1/namespaces/default/secrets/mysecret
  uid: 51fa049e-7083-4a16-8fde-1283a66eea50
type: Opaque

6.通过base64将Value反编码

# echo -n MTIzNDU2 | base64 --decode
123456

# echo -n  YWRtaW4= | base64 --decode
admin

7.通过base64编码

# echo -n admin | base64 
YWRtaW4=

# echo -n 123456 | base64
MTIzNDU2