kubernetes.io/basic-auth: The Kubernetes API does not verify that the required keys are set for a Secret of this type about website HOT 6 CLOSED

Thanks for mentioning this. What's not right about the documentation, in your opinion, @thinkvatsa?

/language en

from website.

As per documentation, for the secret type: kubernetes.io/basic-auth, they keys (username, password) are validated during secret creation.

However, I am able to generate this secret of type kubernetes.io/basic-auth without mentioning password key in the manifest.

Is the documentation correct? If yes, then validation is missing? @sftim

from website.

It sounds like you're saying that specifically

The Kubernetes API verifies that the required keys are set for a Secret of this type.

is wrong. As well as removing that text, we make it clear that “must” means ”you are expected to ensure this” and not “your cluster enforces this“.

/triage accepted

If you want the cluster to enforce that those keys are set, you could make a feature request @thinkvatsa.

As an aside: would be nice to document some ValidatingAdmissionPolicies that do enforce this rule.

from website.

/assign @pegasas
I will create a PR for fixing this.

from website.

Fixed in #46717
/close

from website.

@sftim: Closing this issue.

from website.