一. 创建Secret

1. 创建mysecret.yaml文件

apiVersion: v1data:  username: YWRtaW4=  password: MWYyZDFlMmU2N2Rmkind: Secretmetadata:  name: mysecret  namespace: default

2. 执行mysecret.yaml文件

kubectl apply -f mysecret.yaml

二. 进入etcd

1. 查询etcd的pod

kubectl get pod -n kube-system -l component=etcd# 返回结果NAME                      READY                STATUS              RESTARTS             AGEetcd-k8s-master          1/1                 Running                  29                     8d

2. 进入etcd的pod内部

kubectl exec -it etcd-k8s-master -n kube-system -- /bin/sh

三. 查看创建的Secret

1. 查看etcd的所有成员，找出master访问地址

etcdctl \--cacert=/etc/kubernetes/pki/etcd/ca.crt \--cert=/etc/kubernetes/pki/etcd/healthcheck-client.crt \--key=/etc/kubernetes/pki/etcd/healthcheck-client.key \member list# 返回结果264734958df64a85, started, k8s-master, https://120.xxx.xxx.143:2380, https://120.xxx.xxx.143:2379, false

2. 查询Secret内容

etcdctl \--cacert=/etc/kubernetes/pki/etcd/ca.crt \--cert=/etc/kubernetes/pki/etcd/healthcheck-client.crt \--key=/etc/kubernetes/pki/etcd/healthcheck-client.key \--endpoints=https://120.xxx.xxx.143:2379 \get /registry/secrets/default/mysecret# 返回结果1f2d1e2e67dfsernameadminOpaque

--endpoints：是master的etcd的访问地址