Base64 encoding in Secrets in Kubernetes - Mini Project: Build & Apply

Base64 encoding in Secrets

📖 Scenario: You are managing a Kubernetes cluster and need to store sensitive information like passwords securely. Kubernetes Secrets require data to be base64 encoded before storing.

🎯 Goal: Learn how to create a Kubernetes Secret by base64 encoding the data values manually and then defining the Secret YAML file correctly.

📋 What You'll Learn

Create a plain text file with the secret data

Encode the secret data using base64

Create a Kubernetes Secret YAML file using the encoded data

Verify the Secret contains the correct base64 encoded values

💡 Why This Matters

🌍 Real World

Kubernetes Secrets store sensitive information like passwords, tokens, and keys securely in clusters. Base64 encoding is required to safely store binary or text data in YAML files.

💼 Career

Understanding how to create and manage Kubernetes Secrets is essential for DevOps engineers and cloud administrators to protect sensitive data in production environments.

1

Create a plain text file with the secret data

Create a file named password.txt containing the exact text myS3cretPass.

Kubernetes

# Create a file named password.txt with the text myS3cretPass
# Your code here

Need a hint?

Use the echo command with -n to avoid adding a newline.

2

Encode the secret data using base64

Use the base64 command to encode the contents of password.txt and save the output to a file named password.b64.

Kubernetes

echo -n 'myS3cretPass' > password.txt
# Encode password.txt to base64 and save to password.b64
# Your code here

Need a hint?

Use base64 command and redirect output to password.b64.

3

Create a Kubernetes Secret YAML file using the encoded data

Create a file named secret.yaml with the following content exactly:

apiVersion: v1
kind: Secret
metadata:
  name: mysecret
data:
  password: bXlTM2NyZXRQYXNz

The password value is the base64 encoded string of myS3cretPass.

Kubernetes

echo -n 'myS3cretPass' > password.txt
base64 password.txt > password.b64
# Create secret.yaml with the exact content including base64 encoded password
# Your code here

Need a hint?

Use a here document or any text editor to create secret.yaml with the exact content.

4

Verify the Secret contains the correct base64 encoded values

Run kubectl apply -f secret.yaml to create the Secret, then run kubectl get secret mysecret -o yaml and print the output.

Kubernetes

echo -n 'myS3cretPass' > password.txt
base64 password.txt > password.b64
cat  secret.yaml
apiVersion: v1
kind: Secret
metadata:
  name: mysecret
data:
  password: bXlTM2NyZXRQYXNz
EOF
# Apply the secret.yaml and print the secret details
# Your code here

Need a hint?

Use kubectl apply -f secret.yaml to create the secret and kubectl get secret mysecret -o yaml to view it.