Create a Kubernetes Secret for Service Accounts

Service Account

shell
kind: ServiceAccount
apiVersion: v1
metadata:
name: ppdm-discovery-serviceaccount
namespace: powerprotect


Secret

shell
apiVersion: v1
kind: Secret
metadata:
name: ppdm-discovery-serviceaccount-token
namespace: powerprotect
annotations:
kubernetes.io/service-account.name: ppdm-discovery-serviceaccount
type: kubernetes.io/service-account-token


---

Create a Kubernetes Secret for Service Accounts from a 1Password item

Service Account

shell
kind: ServiceAccount
apiVersion: v1
metadata:
name: ppdm-discovery-serviceaccount
namespace: powerprotect


Secret

shell
apiVersion: onepassword.com/v1
kind: OnePasswordItem
type: kubernetes.io/service-account-token
metadata:
name: ppdm-discovery-token
annotations:
kubernetes.io/service-account.name: ppdm-discovery-serviceaccount
spec:
itemPath: vaults/kube-infra/items/powerprotect__serviceaccount


ERROR (log op-operator)

shell
Reconciler error
{"controller": "onepassworditem", "controllerGroup": "onepassword.com", "controllerKind": "OnePasswordItem", "OnePasswordItem": {"name":"ppdm-discovery-token","namespace":"powerprotect"}, "namespace": "powerprotect", "name": "ppdm-discovery-token", "reconcileID": "4efa5911-3755-4b5a-b407-eccffa09f6ac", "error": "Secret \"ppdm-discovery-token\" is invalid: metadata.annotations[kubernetes.io/service-account.name]: Required value"}


---

Question

• How looks a 1Password item in 1Password?
• How do i create a Kubernetes Secret for Service Accounts from a 1Password item?