Help Center/ Resource Formation Service/ Template Reference/ Application Orchestration Service/ List of Elements/ CCI.Secret
Updated on 2023-08-11 GMT+08:00
View PDF

CCI.Secret

Element Description

The CCI.Secret element is used to create a secret. In Kubernetes, secrets are used to carry sensitive information.

Element Properties

Table 1 Property Description

Property

Required

Descripiton

k8sManifest

Yes

K8s-native manifest object of the Secret, based on which you can create ConfigMap resources to replace other configuration items

Type: dict

Value Description: Supports customization. You are not advised to change the name and labels under the metadata during an update.

type

Yes

type determines how the Service is exposed

Type: string

Value Description: Supports customization.

Default: Opaque

Suggestion: Set the value based on requirements.

namespace

Yes

Namespace in a cluster where a resource is located

Type: HuaweiCloud.CCI.Namespace.Name

Value Description: Must be a valid namespace in the cluster, for example, default.

Value Constraint: The value must start with a letter. Only lowercase letters, digits, and hyphens (-) are allowed.

Suggestion: Log in to the CCI console. In the navigation pane on the left, choose Namespaces. View and select the target namespace.

name

No

CCI name

Type: string

Value Description: Supports customization.

Default: ''

Value Constraint: The value contains 3 to 25 characters and cannot be changed. It must start with a letter, consist of letters, digits, and hyphens (-), and meets the following requirement: (^$)|(^[a-z] ([-a-z0-9]*[a-z0-9])?$).

data

Yes

key-value string map of secret

Type: dict

Value Description: Supports customization.

Suggestion: Set the value based on requirements.

Relationships Between Elements

Table 2 Relationship description

Description

Target

DependsOn

RDS.MySQL

DependsOn

CCI.Secret

DependsOn

CCI.Job

DependsOn

CCI.StatefulSet

DependsOn

CCI.Storage.EVS

DependsOn

DCS.Redis

DependsOn

CCI.Service

DependsOn

CCI.Deployment

DependsOn

CCI.Storage.SFS

DependsOn

CCI.ConfigMap

DependsOn

RDS.PostgreSQL

DependsOn

CCI.Ingress

DependsOn

AOS.Batch

DependsOn

OBS.Bucket

ContainedIn

CCI.Namespace

Return Value

Property

Type

Description

refName

string

Secret name

Blueprint Example

tosca_definitions_version: huaweicloud_tosca_version_1_0
inputs:
  xx-value:
    default: abcd
    type: password
  yy-value:
    default: efgh
    type: password
  name:
    default: my-secret
  ns:
    description: Namespace defines the space within which name must be unique
    label: ''
node_templates:
  mysecret:
    properties:
      data:
        xx:
          get_input: xx-value
        yy:
          get_input: yy-value
      name:
        get_input: name
      namespace:
        get_input: ns
      k8sManifest: {}
    type: HuaweiCloud.CCI.Secret
Parent topic: List of Elements