3 ms·
I think the main reason for base64 encoding is to allow you to store binary data into a secret. Not a security measure. The kubernetes docs say as much: https:/
by gravypod 5y ago
I think the main reason for base64 encoding is to allow you to store binary data into a secret. Not a security measure. The kubernetes docs say as much: https://kubernetes.io/docs/concepts/configuration/secret/ https://kubernetes.io/docs/concepts/configuration/secret/
- jbeda 5y agoCan confirm this is why we did it. Very confused to see Red Hat claim that Base64 was a security thing.
- smarterclayton 5y agoI’m pretty sure the author just wasn’t as familiar with the topic as they should have been. Should have been caught during editing though. As Joe notes, this was just how you most easily encode binary data in JSON. We did discuss that the encoding has a minor benefit to “over the shoulder reader” obscurity, but that wasn’t the goal.
- azaras 5y agoIt is true, in configmap objects you can not store binary data.