Advanced: Secrets with binary data ¶

Nais Console only supports secrets with string values. You can work around this by Base64-encoding the binary data and store the resulting string, though it also requires that your application does the equivalent decoding.

If you instead want to manage binary data directly, you can use the command line interface (CLI) to create and manage secrets with binary data.

This how-to guides you through creating and managing a secret with binary data using the command line.

Prerequisites ¶

Create the secret ¶

Create a secret containing binary files using the kubectl command-line tool.

For a secret named cool-cat, the command should look like this:

kubectl create secret generic cool-cat \
  --from-file=cool-cat.jks=/path/to/cool-cat.jks \
  --context $NAIS_ENVIRONMENT \
  --namespace $NAIS_TEAM

Update the secret ¶

To update the secret, you will need to delete and recreate it with the new files.

For a secret named cool-cat, delete the secret with the following command:

kubectl delete secret cool-cat \
  --context $NAIS_ENVIRONMENT \
  --namespace $NAIS_TEAM

and then recreate the secret with the updated files:

kubectl create secret generic cool-cat \
  --from-file=cool-cat.jks=/path/to/cool-cat.jks \
  --context $NAIS_ENVIRONMENT \
  --namespace $NAIS_TEAM

Any workloads that use the secret must be manually restarted to pick up the changes.

Related pages ¶

🎯 Learn how to use a secret in your workload