News for hackers. Stuff that matters.

A comment on Secret Management in Kubernetes. Parent comment

Re:Secret Management in Kubernetes by gravypod on Sunday July 04, 2021 @01:40PM (#27731313)
I think the main reason for base64 encoding is to allow you to store binary data into a secret. Not a security measure. The kubernetes docs say as much: https://kubernetes.io/docs/concepts/configuration/secret/
[ Parent | on HN ]
Re:Secret Management in Kubernetes by jbeda on Sunday July 04, 2021 @01:58PM (#27731430)
Can confirm this is why we did it. Very confused to see Red Hat claim that Base64 was a security thing.
[ Parent | on HN ]
Re:Secret Management in Kubernetes by smarterclayton on Sunday July 04, 2021 @09:35PM (#27733994)
I’m pretty sure the author just wasn’t as familiar with the topic as they should have been. Should have been caught during editing though.

As Joe notes, this was just how you most easily encode binary data in JSON. We did discuss that the encoding has a minor benefit to “over the shoulder reader” obscurity, but that wasn’t the goal.

[ Parent | on HN ]
Re:Secret Management in Kubernetes by azaras on Sunday July 04, 2021 @02:30PM (#27731631)
It is true, in configmap objects you can not store binary data.
[ Parent | on HN ]