Skip to main content
← back to extensions

K8s Secret

@randybias/k8s-secretv2026.10.17.1beta· 9d agoBEHAVIORSACCEPTED WARNINGS
01README

Create, read, sync and delete a Kubernetes Secret from vault values. Values reach kubectl only on stdin and are never returned: output and stored state carry metadata and key names only.

02Behaviors1
@randybias/k8s-secretv2026.10.17.1secret.ts
fn apply()
DESTRUCTIVE. Create or update a Secret from vault values streamed to kubectl on stdin. Server-side apply prunes keys this model previously owned that are no longer given, and force-conflicts overwrites conflicting values. Idempotent when the desired keys, values and type already match. Returns key names and metadata, never values.
fn get()
READ-ONLY. Read the Secret's metadata and key names. Never returns the values or a value hash.
fn sync()
READ-ONLY. Refresh stored state from the cluster; a Secret that is gone is recorded as not_found instead of failing.
fn delete()
DESTRUCTIVE. Delete the Secret. An already-absent Secret is a clean no-op recorded as not_found.

Resources

state(infinite)— Secret metadata and key names; no values
03Stats
A
93 / 100
Downloads
2
Archive size
75.6 KB
  • Has README or module doc2/2earned
  • README has a code example1/1earned
  • README is substantive1/1earned
  • Most symbols documented1/1earned
  • No slow types (deprecated)1/1earned
  • Dependencies pass trust audit2/2earned
  • Has description1/1earned
  • Platform support declared (or universal)2/2earned
  • License1/2partial

    no SPDX license declared

  • Verified public repository2/2earned
Repository
https://github.com/randybias/swamp-extensions

05Platforms
06Labels
#kubernetes#k8s#secret#kubectl#vault#security