Configure and apply a Kubernetes Secret

Octopus.KubernetesDeploySecret exported 2026-07-22 by Octopus Deploy belongs to ‘Kubernetes’ category.

Deploy a secret resource to Kubernetes.

Parameters

When this step is included in a project’s deployment process, the parameters below can be set.

Secret Name

Octopus.Action.KubernetesContainers.SecretName (required)

The name of the Kubernetes secret resource.

Example: my-secret

Secret Items

Octopus.Action.KubernetesContainers.SecretValues

The secret resource values. Provided as a JSON object of key-value pairs.

Secret Labels

Octopus.Action.KubernetesContainers.DeploymentLabels

The labels applied to the secret resource. Provided as a JSON object of key-value pairs.

Namespace

Octopus.Action.KubernetesContainers.Namespace

The Kubernetes namespace for the secret.

Resource Status Check

Octopus.Action.Kubernetes.ResourceStatusCheck

Whether to verify that the secret reached its desired state after deployment.

Allowed values: True, False

Default: True

Server-Side Apply

Octopus.Action.Kubernetes.ServerSideApply.Enabled

Whether to use server-side apply (—server-side) when calling kubectl apply.

Allowed values: True, False

Default: True

Force Conflicts

Octopus.Action.Kubernetes.ServerSideApply.ForceConflicts

Whether to forcefully overwrite conflicts (—force-conflicts) when using server-side apply.

Allowed values: True, False

Default: True

Step configuration using OCL

Example in Octopus Configuration Language (OCL):

step "deploy-secret" {
    name = "Deploy Secret"
    properties = {
        Octopus.Action.TargetRoles = "k8s-cluster"
    }

    action {
        action_type = "Octopus.KubernetesDeploySecret"
        properties = {
            Octopus.Action.Kubernetes.ResourceStatusCheck = "True"
            Octopus.Action.Kubernetes.ServerSideApply.Enabled = "True"
            Octopus.Action.Kubernetes.ServerSideApply.ForceConflicts = "True"
            Octopus.Action.KubernetesContainers.Namespace = "default"
            Octopus.Action.KubernetesContainers.SecretName = "my-secret"
            Octopus.Action.RunOnServer = "false"
        }
    }
}

Page updated on Wednesday, July 22, 2026