--- apiVersion: v1 kind: Secret metadata: name: contiv-api-proxy-secret namespace: kube-system labels: name: contiv-api-proxy-secret # Use data+b64encode, because stringData doesn't preserve newlines. data: api_proxy_key.pem: "{{ key | b64encode }}" api_proxy_cert.pem: "{{ cert | b64encode }}"