CCI.Secret

Updated on 2023-08-11 GMT+08:00

View PDF

Element Description

The CCI.Secret element is used to create a secret. In Kubernetes, secrets are used to carry sensitive information.

Element Properties

**Table 1** Property Description
Property	Required	Descripiton
k8sManifest	Yes	K8s-native manifest object of the Secret, based on which you can create ConfigMap resources to replace other configuration items Type: dict Value Description: Supports customization. You are not advised to change the name and labels under the metadata during an update.
type	Yes	type determines how the Service is exposed Type: string Value Description: Supports customization. Default: Opaque Suggestion: Set the value based on requirements.
namespace	Yes	Namespace in a cluster where a resource is located Type: HuaweiCloud.CCI.Namespace.Name Value Description: Must be a valid namespace in the cluster, for example, default. Value Constraint: The value must start with a letter. Only lowercase letters, digits, and hyphens (-) are allowed. Suggestion: Log in to the CCI console. In the navigation pane on the left, choose Namespaces. View and select the target namespace.
name	No	CCI name Type: string Value Description: Supports customization. Default: '' Value Constraint: The value contains 3 to 25 characters and cannot be changed. It must start with a letter, consist of letters, digits, and hyphens (-), and meets the following requirement: (^$)\|(^[a-z] ([-a-z0-9]*[a-z0-9])?$).
data	Yes	key-value string map of secret Type: dict Value Description: Supports customization. Suggestion: Set the value based on requirements.

Relationships Between Elements

**Table 2** Relationship description
Description	Target
DependsOn	RDS.MySQL
DependsOn	CCI.Secret
DependsOn	CCI.Job
DependsOn	CCI.StatefulSet
DependsOn	CCI.Storage.EVS
DependsOn	DCS.Redis
DependsOn	CCI.Service
DependsOn	CCI.Deployment
DependsOn	CCI.Storage.SFS
DependsOn	CCI.ConfigMap
DependsOn	RDS.PostgreSQL
DependsOn	CCI.Ingress
DependsOn	AOS.Batch
DependsOn	OBS.Bucket
ContainedIn	CCI.Namespace

Return Value

Property	Type	Description
refName	string	Secret name

Blueprint Example

tosca_definitions_version: huaweicloud_tosca_version_1_0
inputs:
  xx-value:
    default: abcd
    type: password
  yy-value:
    default: efgh
    type: password
  name:
    default: my-secret
  ns:
    description: Namespace defines the space within which name must be unique
    label: ''
node_templates:
  mysecret:
    properties:
      data:
        xx:
          get_input: xx-value
        yy:
          get_input: yy-value
      name:
        get_input: name
      namespace:
        get_input: ns
      k8sManifest: {}
    type: HuaweiCloud.CCI.Secret

Parent topic: List of Elements

Previous topic: CCI.Namespace

Next topic: CCI.Service