<p>In my <code>istio-system</code> namespace, I have the following secret</p>
<pre><code>▶ k get secret istio-ca-secret -o yaml
apiVersion: v1
data:
  ca-cert.pem: LS0tLS1CR...
  ca-key.pem: LS0..
  cert-chain.pem: &quot;&quot;
  key.pem: &quot;&quot;
  root-cert.pem: &quot;&quot;
</code></pre>
<p>While the following query works:</p>
<pre><code>kubectl get secret istio-ca-secret -n istio-system  -o jsonpath=&quot;{.data}&quot;
{&quot;ca-cert.pem&quot;:&quot;LS0t=...&quot;,&quot;ca-key.pem&quot;:&quot;LS0tLS1&quot;,&quot;cert-chain.pem&quot;:&quot;&quot;,&quot;key.pem&quot;:&quot;&quot;,&quot;root-cert.pem&quot;:&quot;&quot;}%       
</code></pre>
<p>the following, which I execute trying to get only the <code>ca-cert.pem</code> value returns nothing</p>
<pre><code>kubectl get secret istio-ca-secret -n istio-system  -o jsonpath=&quot;{.data.ca-cert.pem}&quot;
</code></pre>
<p>why is that?</p>

<p>you need to escape the dot in &quot;ca-cert.pem&quot; to work.</p>
<p>like this</p>
<pre><code>kubectl get secret istio-ca-secret -n istio-system  -o jsonpath=&quot;{.data.ca-cert\.pem}&quot;
</code></pre>
