Secrets Management
ksctl secrets create
In the secrets create API, a new parameter passwordConfig is added with the option passwordconfig, which is of type "json". With this option, the password information is passed via file as shown below:
ksctl secrets create --name <name> --data-type "password" --passwordconfig <path of the json file>
passwordconfig.json sample
{
"passwordLength": 8,
"lowercaseCount": 1,
"uppercaseCount": 1,
"symbolsCount": 1,
"digitsCount": 1
}
Note
Material is a mandatory field for:
all the non-licensed users.
the licensed users for all types other than "password".
passwordconfigis applicable only for the licensed users and type "password".
ksctl secrets list
The secrets list API adds a new filter version.
ksctl secrets list --secretversion 2
ksctl secrets version
The secrets version API creates a new version of the secret.
ksctl secrets version--name <name>
ksctl secrets version --name <key-name> --secretmaterial <secret-material>
Note
Material is a mandatory field for:
all the non-licensed users.
the licensed users for all types other than "password".
If the secret password is created using password config, the same config will be used to create a new version.
If the secret password is created using material, the user needs to provide a new material to create a new version.
ksctl secrets list version
The secrets list version API lists all the versions of an existing secret.
ksctl secrets listversion--name <name>
