Ansible - Get k8s secrets from inside the cluster

get-secret.yaml

---
# This task runs in a container inside the k8s's cluster
# Other required k8s objects:
# - ServiceAccount
# - Role (with read access to secrets)
# - RoleBinding

- name: Get Secret from K8s API
  hosts: localhost
  connection: local
  tasks:
  - name: Get Secret
    kubernetes.core.k8s_info:
      api_version: v1
      kind: Secret
      name: my-cool-secret
      namespace: default
    register: my_secret
  - name: Print secret
    ansible.builtin.debug:
      # Any matching objects are returned as a list of dictionaries
      # Secret values are 64bit encoded as usual
      msg: "{{ my_secret.resources[0].data.password | b64decode }}"
    when: my_secret.api_found  # This value will be true if the requested object was found
    

secret.yaml

---
# An example secret for reference
# Sourced from Lens' default templates

apiVersion: v1
kind: Secret
metadata:
  name: my-cool-secret
  namespace: default
type: kubernetes.io/basic-auth
stringData:
  username: admin
  password: t0p-Secret