Secrets默认是不加密存在etcd的

一. 创建Secret

1. 创建mysecret.yaml文件

apiVersion: v1
data:
  username: YWRtaW4=
  password: MWYyZDFlMmU2N2Rm
kind: Secret
metadata:
  name: mysecret
  namespace: default

2. 执行mysecret.yaml文件

$kubectl apply -f mysecret.yaml

二. 进入etcd

1. 查询etcd的pod

$kubectl get pod -n kube-system -l component=etcd

# 返回结果
NAME              READY   STATUS    RESTARTS   AGE
etcd-k8s-master   1/1     Running   29         8d

2. 进入etcd的pod内部

$kubectl exec -it etcd-k8s-master -n kube-system -- /bin/sh

三. 查看创建的Secret

1. 查看etcd的所有成员，找出master访问地址

$etcdctl \
--cacert=/etc/kubernetes/pki/etcd/ca.crt \
--cert=/etc/kubernetes/pki/etcd/healthcheck-client.crt \
--key=/etc/kubernetes/pki/etcd/healthcheck-client.key \
member list

# 返回结果
264734958df64a85, started, k8s-master, https://120.xxx.xxx.143:2380, https://120.xxx.xxx.143:2379, false

2. 查询Secret内容

$etcdctl \
--cacert=/etc/kubernetes/pki/etcd/ca.crt \
--cert=/etc/kubernetes/pki/etcd/healthcheck-client.crt \
--key=/etc/kubernetes/pki/etcd/healthcheck-client.key \
--endpoints=https://120.xxx.xxx.143:2379 \
get /registry/secrets/default/mysecret

# 返回结果
1f2d1e2e67df
sernameadminOpaque

–endpoints：是master的etcd的访问地址