secrets

Generate Kubernetes Secret and ServiceAccount manifests for docker registry credentials.

Updated Feb 23, 2026
One-click install
npx skills add https://github.com/lordofthejars/hello-world-tekton-bob --skill secrets-lordofthejars
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secrets
Source: https://github.com/lordofthejars/hello-world-tekton-bob/tree/main/skills/secrets
Command: npx skills add https://github.com/lordofthejars/hello-world-tekton-bob --skill secrets-lordofthejars

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates creation of Kubernetes Secret and ServiceAccount manifests that store docker-registry authentication, removing manual manifest authoring and ensuring CI/CD pipelines can authenticate to container registries.

Core Features & Use Cases

  • Generate dockerconfigjson: Build a valid docker config JSON from a registry host, username, and password and encode it in base64.
  • Create Secret manifest: Produce a Kubernetes Secret of the dockerconfigjson type with appropriate annotations for the registry host.
  • Create ServiceAccount manifest: Produce a ServiceAccount that references the created Secret so build systems can use the credentials.
  • Use Case: Useful for Tekton or other CI systems that need registry credentials for image push or pull operations in automated pipelines.

Quick Start

Generate a Kubernetes docker-registry Secret named registry-credentials for host https://index.docker.io/v1/ with username USER and password PASS and output the Secret and ServiceAccount manifests into separate YAML files.

Frequently Asked Questions about secrets

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a Kubernetes docker-registry Secret for CI/CD pipelines?▼

Generate a dockerconfigjson formatted file from your registry host, username, and password, encode it in base64, and output the Kubernetes Secret manifest as a separate YAML file for pipeline authentication.

What is a dockerconfigjson Secret used for in Tekton pipelines?▼

A dockerconfigjson Secret is used in Tekton pipelines to authenticate build systems to container registries, enabling automated container image push or pull operations during CI/CD workflows.

How do I link a Kubernetes Secret to a ServiceAccount for registry credentials?▼

Link a Kubernetes Secret to a ServiceAccount by generating a ServiceAccount manifest that references the created dockerconfigjson Secret, allowing build systems to use the registry credentials automatically.

Does this approach generate separate YAML files for the Secret and ServiceAccount?▼

Yes, generating Kubernetes registry credentials produces separate YAML files for the dockerconfigjson Secret and the ServiceAccount, organizing manifests for direct application in CI/CD environments.

Why do I need base64 encoding for Kubernetes registry secrets?▼

Kubernetes requires base64 encoding for registry secrets because the dockerconfigjson data must be stored as a base64-encoded string within the Secret manifest to ensure valid configuration.