Untitled Lesson

TKG Secrets Review
Where to find secrets
& how to login to the nodes that contain them

Recap of Franklyns workshop on Secrets

Multiple Choice

What node(s) do you want to retrieve the secret/password for,

so that you can ultimately look at logs pertaining to the problematic apps that your kubernetes environment is running ?

• Controlplane Node

• Worker Node

• Both

What node do you ultimately want to retrieve the secret/password for, so that you can look at logs pertaining to problematic apps your kubernetes environment is running ?

Both the supervisor control plane node and the worker nodes secrets need to be retrieved for you to ultimately get the logs

Whats the process of getting those secrets

Which of the following is the correct 1st step ?

SSH into the control plane node

SSH into vSphere

SSH into the worker node

Multiple Choice

Which of the following is the correct 1st step ?

• SSH into the control plane node

• SSH into vSphere

• SSH into a worker node

Whats the process of getting the secrets/passwords to nodes

Step 1 - you'll first SSH into vSphere
here you will find the secret to ssh into the _____ node

Multiple Choice

The secret found in vSphere will allow you to ssh into which node ?

• Worker node

• Controlplane node

Whats the process of getting the secrets/passwords to nodes

Step 1 - you'll first SSH into vSphere
here you will find the password to ssh into the controlplane node

Step 2 - navigate to the directory with the controlplane node secret
whats the path of this directory?

Multiple Choice

Whats the full path (in vSphere) of the directory containing the login secret to ssh into controlplane node ?

(whats the most accurate example)

• /etc/vmware/wcp/encryption-config.yaml 

• /usr/lib/vmware-wcp/decryptK8Pwd.py

• /registry/secrets/ns1/wl1-22-ssh-password

Whats the process of getting the secrets/passwords to nodes

Step 1 - you'll first SSH into vSphere
here you will find the password to ssh into the controlplane node

Step 2 - navigate to the directory with the controlplane node secret
path: /usr/lib/vmware-wcp/decryptK8Pwd.py
note: you will use "pwd" to then ssh into the controlplane

Whats the process of getting the secrets/passwords to nodes

Step 1 - you'll first SSH into vSphere ...here you will find the password to ssh into the controlplane node

Step 2 - navigate to the directory with the controlplane node secret
path: /usr/lib/vmware-wcp/decryptK8Pwd.py
note: you will use "pwd" to then ssh into the controlplane

Step 3 - get the ip address of the controlplane VM, then SSH into it using the "pwd"

Multiple Choice

Which of the following can be used to locate the IP address of your controlpane VM's

• google

• Vcenter

• traceroute

Whats the process of getting the secrets/passwords to nodes

Step 1 - you'll first SSH into vSphere ...here you will find the password to ssh into the controlplane node

Step 2 - navigate to the directory with the controlplane node secret
path: /usr/lib/vmware-wcp/decryptK8Pwd.py
note: you will use "pwd" to then ssh into the controlplane

Step 3 - get the ip address of the controlplane VM, then SSH into it using the "pwd"
the ip address can be found in vCenter

Whats the process of getting the secrets/passwords to nodes

Step 1 - you'll first SSH into vSphere ...here you will find the password to ssh into the controlplane node

Step 2 - navigate to the directory with the controlplane node secret
path: /usr/lib/vmware-wcp/decryptK8Pwd.py
note: you will use "pwd" to then ssh into the controlplane

Step 3 - get the ip address of the controlplane VM, so you can SSH to it using the "pwd"
the ip address can be found in vCenter

Step 4 - SSH to the control plane vm

Step 5 - Then we run the command to get the secret to ssh into the worker node

what is the command to get the secret ?

Multiple Choice

What is the command to get the secret ?

• kubectl get secrets wl1-22-ssh-password -o json

• kubectl get secrets -n <namespace> wl1-22-ssh-secret -o json

• kubectl get secrets -n <namespace> wl1-22-ssh-password -o json

Whats the process of getting the secrets/passwords to nodes

Step 1 - you'll first SSH into vSphere ...here you will find the password to ssh into the controlplane node

Step 2 - navigate to the directory with the controlplane node secret
path: /usr/lib/vmware-wcp/decryptK8Pwd.py
note: you will use "pwd" to then ssh into the controlplane

Step 3 - get the ip address of the controlplane VM, so you can SSH to it using the "pwd"
the ip address can be found in vCenter

Step 4 - SSH into the control plane vm

Step 5 - Then we run the command to get the secret that will allows us to ssh into the worker node
--> kubectl get secrets -n <namespace> wl1-22-ssh-password -o json

Step 6 - Decode the "ssh-password" secret so that it can be used to ssh into a worker node
Q: How would the secret be decoded, whats the command to do this ?

Whats the process of getting the secrets/passwords to nodes

Step 1 - you'll first SSH into vSphere ...here you will find the password to ssh into the controlplane node

Step 2 - navigate to the directory with the controlplane node secret
path: /usr/lib/vmware-wcp/decryptK8Pwd.py
note: you will use "pwd" to then ssh into the controlplane

Step 3 - get the ip address of the controlplane VM, so you can SSH to it using the "pwd"
the ip address can be found in vCenter

Step 4 - SSH into the control plane vm

Step 5 - Then we run the command to get the secret that will allows us to ssh into the worker node
--> kubectl get secrets -n <namespace> wl1-22-ssh-password -o json





Step 6 - Decode the "ssh-passwordkey" secret so that it can be used to ssh into a worker node
Q: How would the secret be decoded, whats the command to do this ?

Whats the process of getting the secrets/passwords to nodes

Step 1 - you'll first SSH into vSphere ...here you will find the password to ssh into the controlplane node

Step 2 - navigate to the directory with the controlplane node secret
path: /usr/lib/vmware-wcp/decryptK8Pwd.py
note: you will use "pwd" to then ssh into the controlplane

Step 3 - get the ip address of the controlplane VM, so you can SSH to it using the "pwd"
the ip address can be found in vCenter

Step 4 - SSH into the control plane vm

Step 5 - Then we run the command to get the secret that will allows us to ssh into the worker node
--> kubectl get secrets -n <namespace> wl1-22-ssh-password -o json

Step 6 - Decode the "ssh-passwordkey" secret so that it can be used to ssh into a worker node
--> echo "haJhaijXhiasndhaij" | base64 -d

Step 7 - ssh into one of the worker nodes (with an worker node ip from Vcenter) using the decoded secret from above