Updated on 2025-04-03 GMT+08:00

ccictl create secret tls

Scenario

Create a TLS secret using a given public/private key pair.

The public/private key pair must exist beforehand. The public key certificate must be in .PEM format and match the given private key.

ccictl create secret tls NAME --cert=path/to/cert/file --key=path/to/key/file

Examples

# Create a new TLS secret named tls-secret with the given key pair
ccictl create secret tls tls-secret --cert=path/to/tls.crt --key=path/to/tls.key

Options

--allow-missing-template-keys     Default: true

If the value is true, the error in the template is ignored when a field or mapping key is missing in the template. This option applies only to the Golang and JSONPath output formats.

--append-hash

Append a hash of the secret to its name.

--cert string

Path of the PEM-encoded public key certificate

-h, --help

Help information for create secret tls

--key string

Path of the private key associated with the given certificate

-o, --output string

Output format. The value options include json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, and jsonpath-file.

--save-config

If the value is true, the configuration of the object is saved in its annotation. Otherwise, the annotation remains unchanged. This flag is useful when you want to run the ccictl apply command on the object.

--template string

Template character string or template file path used when -o is set to go-template or go-template-file. The Golang template format is [http://golang.org/pkg/text/template/#pkg-overview].

The following ccictl options can also be used in subcommands:

Parent command options