apiVersion: v1
kind: Secret
metadata:
# this is the jenkins id.
  name: "a-test-secret"
  labels:
# so we know what type it is.
    "jenkins.io/credentials-type": "secretText"
# set the scope (default global)
    "jenkins.io/credentials-scope": "system"
  annotations:
# description - can not be a label as spaces are not allowed
    "jenkins.io/credentials-description" : "secret text credential from Kubernetes"
type: Opaque
data:
# UTF-8 base64 encoded
  text: bXlTZWNyZXQh  # mySecret!
