3 ms·
Wait, so the argument here is that securing secrets is somehow not worth it? That’s just silly. And that’s the most kind word I can think of for it. It might ac
by more_corn 3y ago
Wait, so the argument here is that securing secrets is somehow not worth it? That’s just silly. And that’s the most kind word I can think of for it. It might actually be too kind. Stupid might be more correct. Or just wrong.
Step through it as an attacker. There are half a dozen attack vectors where securing your secrets makes sense. Even storing them in plaintext in a file on a server is more secure than k8s “secrets”.
I just can’t even…
- ithkuil 3y agoCan you mention one of the attack vectors that would allow an attacker to see my K8s secrets, provided that RBAC is properly configured?