Events

Base64 is not encryption - a better story for Kubernetes Secrets - devopsdays Philadelphia 2019

devopsdays.org

Secrets are a key pillar of Kubernetes’ security model, used internally (e.g. service accounts) and by users (e.g. API keys), but did you know they are stored in plaintext? That’s right, by default all Kubernetes secrets are base64 encoded and stored as plaintext in etcd. Anyone with access to the etcd cluster has access to all your Kubernetes secrets. Thankfully there are better ways. This lecture provides an overv…

Visit Site