Hacker News Reader

Comment by topspin | Hacker News Reader

> which is very unfortunate coming from RedHat...

It's sad but undeniable anecdote, most easily explained by ignorance; Red Hat is just an IBM brand serviced by low skill/cost IT drones now.

The fact that Kubernetes uses base64 for storing secrets by default is another head shaker. One would think self respect would preclude this sort of thing.

View on HN

It is not a default by any means, you can write it down to yaml as plain text too without any processing[0]. Just for some reason people decided to always use base64 without any actual reason behind it.

Edit: There is reason to do it explained above[1] - to store binary data in the yaml, but doesn't change fact you don't have to use it.

[0] https://kubernetes.io/docs/concepts/configuration/secret/#ba...

[1] https://news.ycombinator.com/item?id=27731430

> It is not a default by any means

Yes it is.

   Caution:
   Kubernetes Secrets are, by default, stored as unencrypted base64-encoded strings.

https://kubernetes.io/docs/concepts/configuration/secret/

I'm sorry, I thought it was about storing it in yaml and not the underlying storage method.

> Red Hat is just an IBM brand serviced by low skill/cost IT drones now

Citation requested.

Reply on news.ycombinator.com