secrets

Generate Kubernetes Secret and ServiceAccount manifests for docker registry credentials.

Updated Feb 23, 2026
One-click install
npx skills add https://github.com/lordofthejars/hello-world-tekton-bob --skill secrets-lordofthejars
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: secrets
Source: https://github.com/lordofthejars/hello-world-tekton-bob/tree/main/skills/secrets
Command: npx skills add https://github.com/lordofthejars/hello-world-tekton-bob --skill secrets-lordofthejars

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates creation of Kubernetes Secret and ServiceAccount manifests that store docker-registry authentication, removing manual manifest authoring and ensuring CI/CD pipelines can authenticate to container registries.

Core Features & Use Cases

  • Generate dockerconfigjson: Build a valid docker config JSON from a registry host, username, and password and encode it in base64.
  • Create Secret manifest: Produce a Kubernetes Secret of the dockerconfigjson type with appropriate annotations for the registry host.
  • Create ServiceAccount manifest: Produce a ServiceAccount that references the created Secret so build systems can use the credentials.
  • Use Case: Useful for Tekton or other CI systems that need registry credentials for image push or pull operations in automated pipelines.

Quick Start

Generate a Kubernetes docker-registry Secret named registry-credentials for host https://index.docker.io/v1/ with username USER and password PASS and output the Secret and ServiceAccount manifests into separate YAML files.

Frequently Asked Questions about secrets

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a Kubernetes docker-registry Secret for CI/CD pipelines?

Generate a dockerconfigjson formatted file from your registry host, username, and password, encode it in base64, and output the Kubernetes Secret manifest as a separate YAML file for pipeline authentication.

What is a dockerconfigjson Secret used for in Tekton pipelines?

A dockerconfigjson Secret is used in Tekton pipelines to authenticate build systems to container registries, enabling automated container image push or pull operations during CI/CD workflows.

How do I link a Kubernetes Secret to a ServiceAccount for registry credentials?

Link a Kubernetes Secret to a ServiceAccount by generating a ServiceAccount manifest that references the created dockerconfigjson Secret, allowing build systems to use the registry credentials automatically.

Does this approach generate separate YAML files for the Secret and ServiceAccount?

Yes, generating Kubernetes registry credentials produces separate YAML files for the dockerconfigjson Secret and the ServiceAccount, organizing manifests for direct application in CI/CD environments.

Why do I need base64 encoding for Kubernetes registry secrets?

Kubernetes requires base64 encoding for registry secrets because the dockerconfigjson data must be stored as a base64-encoded string within the Secret manifest to ensure valid configuration.