Base64 encoding in Secrets in Kubernetes - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Base64 encoding in Kubernetes Secrets?

Base64 encoding is a way to convert data into a text format using letters, numbers, and symbols. Kubernetes Secrets use Base64 to safely store sensitive data like passwords in YAML files.

beginner

Why does Kubernetes require Secret data to be Base64 encoded?

Kubernetes requires Base64 encoding to ensure that binary or special characters in secret data are safely stored in YAML files, which only support text. It is not encryption but a simple text conversion.

beginner

How do you encode a password 'mypassword' to Base64 on a Linux terminal?

Use the command: echo -n 'mypassword' | base64. The -n avoids adding a new line. This outputs the Base64 encoded string.

beginner

How do you decode Base64 encoded data back to plain text?

Use the command: echo 'encoded_string' | base64 --decode. Replace encoded_string with your Base64 text to get the original data.

intermediate

What is the difference between Base64 encoding and encryption in Kubernetes Secrets?

Base64 encoding only changes data format to text; it does not hide or protect data. Encryption actually scrambles data to keep it secret. Kubernetes Secrets use Base64 encoding by default but can be combined with encryption for security.

Why is Base64 encoding used in Kubernetes Secrets?

A To compress the secret data

B To encrypt the secret data

C To convert data into a text format safe for YAML files

D To hash the secret data

Base64 encoding converts data into text so it can be safely stored in YAML files. It does not encrypt or compress data.

Which command encodes the string 'hello' to Base64 on Linux?

A echo -n 'hello' | base64

B echo 'hello' | base64 --decode

C base64 encode 'hello'

D base64 -d 'hello'

The correct command is echo -n 'hello' | base64. The -n prevents adding a new line.

What does Base64 decoding do?

A Compresses the data

B Encrypts the data

C Hashes the data

D Converts encoded text back to original data

Base64 decoding converts the encoded text back to its original form.

Is Base64 encoding a secure way to protect secrets?

A No, it only changes data format

B No, it hashes the data

C Yes, it compresses the data

D Yes, it encrypts the data

Base64 encoding only changes the data format to text. It does not provide security or encryption.

Where do you place Base64 encoded data in a Kubernetes Secret YAML?

A Under the <code>metadata</code> field

B Under the <code>data</code> field

C Under the <code>spec</code> field

D Under the <code>status</code> field

Base64 encoded secret values go under the data field in the Secret YAML.

Explain why Kubernetes Secrets require Base64 encoding and how to encode and decode secret data.

Think about how text files handle special characters.

Describe the difference between Base64 encoding and encryption in the context of Kubernetes Secrets.

One is about format, the other about security.