can I create secrets in openshift 4.3 from files?

0
votes

I'm new to openshift and Kubernetes too (coming from Docker swarm world). and I'm looking to create secrets in openshift using definition file. these secrets are generated from a file. to give an example of what I'm trying to do let's say I have a file "apache.conf" and I want to add that file to containers as a secret mounted as a volume. In swarm I can just write the following in the stack file:

my-service:
 secrets:
  - source: my-secret
    target: /home/myuser/
    mode: 0700
secrets:
 my-secret:
   file: /from/host/apache.conf

In openshift I'm looking to have something similar like:

apiVersion: v1
kind: Secret
metadata:
- name: my-secret
  files:
    - "/from/host/apache.conf"
type: Opaque

The only way I've found that I can do something similar is by using kustomize and according to this post using Kustomize with openshift is cumbersome. is there a better way for creating secrets from a file?

1
kubernetesopenshiftdocker-swarmkustomize

1 Answers

1
votes

No you can't

The reason is that the object Secret is stored in the etcd database and is not bound to any host. Therefore, the object doesn't understand the path. You can create the secret from a file using the cli, and then the content will be saved in the Secret object.

oc create secret generic my-secret --from-file=fil1=pullsecret_private.json