Decode base64-encoded Kubernetes secret

Decode-base64-encoded-Kubernetes-secret.md

Decode base64-encoded Kubernetes secret

With jsonpath

Get secret

• Common case: nested name with NO dot

# .data.name
k get secret <some_secret_name> -o jsonpath="{.data.name}" | base64 -d

# kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d; echo

• nested name with dots

# .data."tls.key"
# With dot (.) in the key(name)
k get secret <some_secret_name> -o jsonpath="{.data['tls\.key']}" | base64 -d

# k get secret argocd-secret -o jsonpath="{.data['tls\.key']}" | base64 -d

With jq

Prerequisites

• jq installed

brew install jq

Get secret

• Common case: nested name with NO dot

# .metadata.annotations
k get secret <some_secret_name> -ojson | jq -r '.metadata.annotations'

k get secret argocd-secret -ojson | jq -r '.metadata.annotations'

• nested name with dots

# .data."tls.key"
# With dot (.) in the key(name)
k get secret <some_secret_name> -ojson | jq -r '.data["tls.key"]' | base64 -d