docs/daprdocs/content/en/reference/components-reference/supported-cryptography/kubernetes-secrets.md

1.2 KiB

type title linkTitle description
docs Kubernetes Secrets Kubernetes Secrets Detailed information on the Kubernetes secret cryptography component

Component format

The purpose of this component is to load keys that are stored as Kubernetes secrets.

{{% alert title="Note" color="primary" %}} This component uses the cryptographic engine in Dapr to perform operations. Although keys are never exposed to your application, Dapr has access to the raw key material.

{{% /alert %}}

A Dapr crypto.yaml component file has the following structure:

apiVersion: dapr.io/v1alpha1
kind: Component
metadata:
  name: <NAME>
spec:
  type: crypto.<TYPE>
  version: v1
  metadata:
  - name: defaultNamespace
    value: <VALUE>

{{% alert title="Warning" color="warning" %}} The above example uses secrets as plain strings. It is recommended to use a secret store for the secrets, as described [here]({{< ref component-secrets.md >}}). {{% /alert %}}

Spec metadata fields

Field Required Details Example
defaultNamespace N
requestTimeout N

[Cryptography building block]({{< ref cryptography >}})