Tekton pipelines - secret displayed on dashboard

Question

Just wanted to know if there is a way I can stop showing the secret I created on tekton dashboard. For example -

In the tekton task running this following command -

The $APIKEY is being pulled from a secret resource created.

And in the dashboard, I am seeing the API key is displayed when running the above command -

Is there any way to pass the `apikey` from a file instead for a plain value to your app? That would be easier to handle safely. — Jonas, Oct 11 '20 at 18:35

score 2 · Answer 1 · answered Oct 13 '20 at 07:45

2

Parameters are always, embedded as plaintext and will be, passed as plaintext. You will see the values not only in dashboard but even if you are using the tkn cli.

Either you use a file or a env var, see examples in

file https://github.com/tektoncd/catalog/blob/master/task/aws-cli/0.1/aws-cli.yaml

env https://github.com/tektoncd/catalog/blob/master/task/sendmail/0.1/sendmail.yaml

answered Oct 13 '20 at 07:45

MrSimpleMind

7,890
3
40
45

1

Thanks will have a read but for this use-case I managed to do this by using set +x and -x before and after the shell command. – Pranav Bhatia Oct 13 '20 at 15:04

Tekton pipelines - secret displayed on dashboard

1 Answers1