# Basic Auth - Add consumer with kubectl (dbless)

**URL:** <https://discuss.konghq.com/t/basic-auth-add-consumer-with-kubectl-dbless/10723>\
**Category:** General\
**Tags:** kong-gateway\
**Created:** [September 28, 2022, 1:46pm UTC](https://discuss.konghq.com/t/basic-auth-add-consumer-with-kubectl-dbless/10723 "2022-09-28T13:46:40Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![raxtorDD](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/raxtordd/32/3654_2.png) [@raxtorDD](https://discuss.konghq.com/u/raxtorDD)\
**Post date:** [September 28, 2022, 1:46pm UTC](https://discuss.konghq.com/t/basic-auth-add-consumer-with-kubectl-dbless/10723/1 "2022-09-28T13:46:41Z")

</div>

Hello,

does somebody know if it is possible to to add a consumer (with username and password) to the kubernetes configuration via kubectl?  
My problem is that I have a dbless kong gateway configuration on my kubernetes cluster and I also don’t want to change the declarative configuration file manually. All my deployments are done via helm or kubectl.

I found a way to add a KongConsumer with an Opaque secret but unfortunately this doesn’t work.

Is my approach possible? Hopefully somebody can help me with this 🙂

Thanks!

---

<div class="post-metadata">

**Author:** ![fomm](https://avatars.discourse-cdn.com/v4/letter/f/ea666f/32.png) [@fomm](https://discuss.konghq.com/u/fomm)\
**Post date:** [September 28, 2022, 1:54pm UTC](https://discuss.konghq.com/t/basic-auth-add-consumer-with-kubectl-dbless/10723/2 "2022-09-28T13:54:40Z")

</div>

Yep. Below is an example.

```nohighlight
---
apiVersion: configuration.konghq.com/v1
kind: KongPlugin
metadata:
  name: basic-auth-plugin
config: 
  hide_credentials: true
plugin: basic-auth
---
apiVersion: configuration.konghq.com/v1
kind: KongConsumer
metadata:
  name: basic-auth-user
  annotations:
    kubernetes.io/ingress.class: "kong"
username: basic-auth-username
credentials:
  - basic-auth-secret
---
apiVersion: v1
kind: Secret
metadata:
  name: basic-auth-secret
type: Opaque
stringData:
  kongCredType: basic-auth
  username: testuser
  password: testpass

```

---

<div class="post-metadata">

**Author:** ![raxtorDD](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/raxtordd/32/3654_2.png) [@raxtorDD](https://discuss.konghq.com/u/raxtorDD)\
**Post date:** [September 28, 2022, 2:02pm UTC](https://discuss.konghq.com/t/basic-auth-add-consumer-with-kubectl-dbless/10723/3 "2022-09-28T14:02:26Z")

</div>

> [@fomm](#):
>
> ```auto
> apiVersion: configuration.konghq.com/v1
> kind: KongConsumer
> metadata:
> name: basic-auth-user
> annotations:
> kubernetes.io/ingress.class: "kong"
> username: basic-auth-username
> credentials:
> - basic-auth-secret
> 
> ```

You saved my day! Thanks!!

I was missing “kongCredType: basic-auth”. I knew I had to put that somewhere but couldn’t find any example.

---

<div class="post-metadata">

**Author:** ![fomm](https://avatars.discourse-cdn.com/v4/letter/f/ea666f/32.png) [@fomm](https://discuss.konghq.com/u/fomm)\
**Post date:** [September 28, 2022, 2:15pm UTC](https://discuss.konghq.com/t/basic-auth-add-consumer-with-kubectl-dbless/10723/4 "2022-09-28T14:15:55Z")

</div>

No worries.

In case you are interested, this [github repo](https://github.com/liyangau/kong-ingress-controller-demos) has examples for some other plugins like acl, oauth2, key-auth. These plugins also use `kongCredType`.