podman kube play: Secret metadata.labels not forwarded to Spec.Labels

[Shubhamag12]

metadata.labels are not forwarded to Spec.Labels when a secret is created via kube play.
For example this manifest

apiVersion: v1
kind: Secret
metadata:
  name: test-secret
  labels:
    labelKey: "labelValue"
type: Opaque
data:
  key: value

podman kube play secret.yaml

{
   "Spec": {
       "Name": "test-secret",
       "Driver": {
           "Name": "file",
           "Options": {
               "path": "/var/lib/containers/storage/secrets/filedriver"
           }
       },
       "Labels": {}
   }
}

Labels is always {} regardless of what is defined in metadata.labels.
Is this a known limitation in the kube play secret handling code?

[mg1986jp]

Yes, this is a known gap in the kube play secret handling. The code that converts Kubernetes Secret manifests to Podman secrets (pkg/domain/infra/abi/play.go, playKubeSecret function) creates the secret using secrets.CreateSecretOpts and only passes Name, Driver, and the secret data. The metadata.labels from the YAML are parsed but never mapped to Spec.Labels.

For reference, the secret creation call looks roughly like:

secretID, err := ic.Libpod.Secrets().Create(
    secretName,
    secretData,
    secrets.CreateSecretOpts{
        Driver:     driver,
        DriverOpts: driverOpts,
    },
)

There's no Labels field being set from the Kubernetes metadata.

Workaround: create the secret manually with labels, then run kube play — it will skip creating secrets that already exist:

echo -n "value" | podman secret create --label labelKey=labelValue test-secret -
podman kube play pod.yaml

This is worth filing as a bug (or even a PR if you're up for it). The fix would be straightforward — add a Labels field to the CreateSecretOpts call in playKubeSecret, populated from secret.ObjectMeta.Labels. The same pattern is already used for pods and containers in kube play where labels are forwarded correctly.

[Shubhamag12]

This is worth filing as a bug (or even a PR if you're up for it).

Sure, would like to take this up :)
Thanks!