kx secret
Lists Secrets exactly as kx get does. With --decode, prints an indexed Secret’s data in plaintext, or every Secret in the namespace when no index is given.
A flag kx doesn’t know is refused; put it after -- to pass it through to kubectl.
Usage
kx secret [OPTIONS] [index]... [kubectl flags]Aliases
kx secrets
Arguments
| Argument | Description |
|---|---|
[index]... | Row number from the current listing, or @name for a mark; kx state or kx mark shows them |
Options
| Option | Description |
|---|---|
-A, --all-namespaces | List across every namespace; each row is indexed and carries its own namespace |
--decode | Show Secret data in plaintext; every Secret in the namespace when no index is given |
-k, --key string | With --decode, print only this key’s value |
-m, --match string | Match by name (substring, case-insensitive) |
-n, --namespace string | Namespace to list from; defaults to the current namespace |
--no-headers | Leave out the header row; kx can’t number a table without one |
-o, --output string | Output format, as kubectl takes it; kx numbers only a table |
-w, --watch | Redraw the listing live as resources change; a watch never completes, so results are not indexed |
-y, --yes | Skip the confirmation prompt for a namespace-wide --decode |
Passthrough options
| Option | Description |
|---|---|
--allow-missing-template-keys | If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. |
--chunk-size int64 | Return large lists in chunks rather than all at once. Pass 0 to disable. |
--field-selector string | Selector (field query) to filter on, supports ‘=’, ‘==’, and ‘!=’.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type. |
-f, --filename strings | Filename, directory, or URL to files identifying the resource to get from a server. |
--ignore-not-found | If set to true, suppresses NotFound error for specific objects that do not exist. Using this flag with commands that query for collections of resources has no effect when no resources are found. |
--kustomize string | Process the kustomization directory. This flag can’t be used together with -f or -R. |
-L, --label-columns strings | Accepts a comma separated list of labels that are going to be presented as columns. Names are case-sensitive. You can also use multiple flag options like -L label1 -L label2… |
--output-watch-events | Output watch event objects when --watch or --watch-only is used. Existing objects are output as initial ADDED events. |
--raw string | Raw URI to request from the server. Uses the transport specified by the kubeconfig file. |
-R, --recursive | Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory. |
-l, --selector string | Selector (label query) to filter on, supports ‘=’, ‘==’, ‘!=’, ‘in’, ’notin’.(e.g. -l key1=value1,key2=value2,key3 in (value3)). Matching objects must satisfy all of the specified label constraints. |
--server-print | If true, have the server return the appropriate table output. Supports extension APIs and CRDs. |
--show-kind | If present, list the resource type for the requested object(s). |
--show-labels | When printing, show all labels as the last column (default hide labels column) |
--show-managed-fields | If true, keep the managedFields when printing objects in JSON or YAML format. |
--sort-by string | If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. ‘{.metadata.name}’). The field in the API resource specified by this JSONPath expression must be an integer or a string. |
--subresource string | If specified, gets the subresource of the requested object. |
--template string | Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview]. |
--watch-only | Watch for changes to the requested object(s), without listing/getting first. |
… | kubectl’s global flags too: --context, --kubeconfig, --as and the rest; kubectl options lists them |
Global options
| Option | Description |
|---|---|
--no-color | Disable styled output |
-h, --help | Show this message and exit |
Examples
kx secret
kx secret 1 --decode
kx secret 1 --decode -k tls.crt
kx secret 1..3
kx secret 3..
kx secret -l app=web