What does quarkus.kubernetes-config.secrets actually do?

[jonsnowseven]

Hello.

I am exploring the quarkus.kubernetes-config.secrets parameter.

• As I understood, Quarkus will fetch the secret values using K8s API (so I guess it will need the associated permissions) and inject them in the Quarkus Configuration? Am I assuming this correctly?
• If I have the k8s secret mapped to a volume, is there a way to inject the file contents in the Quarkus Config using any property?

Thank you in advance.

[quarkus-bot[bot]]

/cc @geoand (kubernetes), @iocanel (kubernetes), @radcortez (config)

[geoand]

As I understood, Quarkus will fetch the secret values using K8s API (so I guess it will need the associated permissions) and inject them in the Quarkus Configuration? Am I assuming this correctly?

Absolutely correct!

If I have the k8s secret mapped to a volume, is there a way to inject the file contents in the Quarkus Config using any property?

So you are asking how the application should be configured to use the file contents?

[geoand]

If you could configure the secret to inject the file as a $PWD/config/application.properties, it should just work

[jonsnowseven]

But besides that, is there a Quarkus-like way of doing it?

[geoand]

If you configure quarkus.kubernetes... properly, you can set it up

[jonsnowseven]

Let's say I have a secret in /etc/secrets called my-secret. How should I set up Quarkus to inject the contents in the configuration?

[geoand]

I don't remember honestly as I have not tried it in a long time