kes secret create

Overview

Add a new secret to use on the KES server.

Syntax

kes secret create                   \
            <name>                  \
            <value>                 \
            [--file <path>]         \
            [--insecure, -k]

Parameters

name

Required

A short name to use to refer to the secret.

--file

Use the contents of a file as the secret. Provide the path to the file.

You cannot provide both a --file and a value.

--insecure, -k

Optional

Directs the command to skip x.509 certificate validation during the TLS handshake with the KES server. This allows connections to KES servers using untrusted certificates (i.e. self-signed or issued by an unknown Certificate Authority).

MinIO strongly recommends against using this option in production environments.

value

Optional

The string to use as the secret. You cannot provide both a --file and a value.

If you do not provide a value to use and do not specify --file, KES prompts you to enter the secret.

Examples

Have KES prompt for the secret to use:

kes secret create my-secret-prompt-me

Specify the value of the secret in the command:

kes secret create my-secret Ch@ng3-Me

Use the contents of a file as the secret:

kes secret create my-secret-from-file --file ./path/to/file.txt