By default, Kubernetes Secrets are not encrypted; values are merely base64 encoded.

And this is fine — at least, this is what Mac argues in this episode of KubeFM.

Mac says it all comes down to thinking strategically about security and where the Secrets could be leaked.

In this episode, you will learn:

  • How to define a threat model to inform your security posture and mitigations.

  • How Kubernetes Secrets offer sufficient guarantees for most common threat models.

  • If you should use Hashicorp Vault or Kubernetes Secrets (and when not to use auto-unsealing).

Mac also covers tips and advice on becoming a security expert.

More info

Rss Apple Podcaster
Podden och tillhörande omslagsbild på den här sidan tillhör KubeFM. Innehållet i podden är skapat av KubeFM och inte av, eller tillsammans med, Poddtoppen.

Senast besökta

KubeFM

Kubernetes base64 secrets are fine, with Mac Chaffee

00:00