#security - December 2018

this is neat: https://privacy.com/

@antonbabenko auto unseal has arrived

About time.

Beautiful

lololol

gravitational guys have reproduced the kubernetes exploit

oh joy!

just something in time for the holidays... a gift to the spammers & scammers for christmas

yea, great timing...

Nice trick

And then using this pattern with Kubernetes https://www.bitservices.io/blog/confd-kubernetes/

Are k8s secrets still unencrypted in etcd?

and not at all secret?

they are encrypted at rest in etcd

that seems new since I last looked (1+ year ago)

though I guess it depends on your k8s implementation

here’s the setup in kops manifest

Also see: https://sweetops.slack.com/archives/CBW699XE0/p1545026602047500?thread_ts=1545025932.043500&cid=CBW699XE0