From 3ad97fec5745b6952beef01e9e3916a2301c3d20 Mon Sep 17 00:00:00 2001
From: Rob Percival <robpercival@google.com>
Date: Mon, 25 Feb 2019 11:10:56 +0000
Subject: [PATCH] Document how to delete secrets

---
 k8s/trillian/README.md | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/k8s/trillian/README.md b/k8s/trillian/README.md
index 16fb267319..1b9be3408b 100644
--- a/k8s/trillian/README.md
+++ b/k8s/trillian/README.md
@@ -305,6 +305,17 @@ kubectl delete persistentvolumeclaims \
   --selector "app.kubernetes.io/name=${APP_INSTANCE_NAME}"
 ```
 
+### Delete secrets
+
+Secrets stored in Kubernetes (e.g. database password) are not automatically
+deleted. To delete these, run the following `kubectl` command.
+
+```shell
+kubectl delete secret \
+  --namespace "${NAMESPACE}" \
+  --selector "app.kubernetes.io/name=${APP_INSTANCE_NAME}"
+```
+
 ### Delete the GKE cluster
 
 Optionally, if you don't need the deployed application or the GKE cluster,