gcp-gke-kubernetes-secret-data
Kubernetes Secrets are merely base64-encoded in the API and commonly hold workload credentials.
Where it sits
| location | Kubernetes CoreV1 readNamespacedSecret/listSecretForAllNamespaces.Secret.data.<value>/Secret.stringData.<value> |
|---|
| location kind | secret_value |
|---|
| data kinds | credential password api_key private_key certificate sensitive_data |
|---|
| emits edge | CanReadSecret |
|---|
| service | GKE (gcp:gke) |
|---|
Collection recipe
| access mode | data_plane |
|---|
| operation | Kubernetes CoreV1 readNamespacedSecret/listSecretForAllNamespaces |
|---|
| response path | Secret.data.<value>/Secret.stringData.<value> |
|---|
| encoding | base64 |
|---|
| params | {"cluster": "\u003ccluster\u003e", "name": "\u003csecret\u003e", "namespace": "\u003cnamespace\u003e"} |
|---|
Required permissions
container.clusters.get
References