Hacker News

points by cluckindan 2 days ago | 0 comments

Probably a lot of companies which have their own k8s cluster and segregate kubectl access to operations only. Developers still need a way to their app backend in some cases.

[–] chuckadams 2 days ago

Kubernetes already comes with better solutions for that sort of thing. I could see a ssh bastion container for bridging to legacy infrastructure though. Manage its keys right and it's probably more secure than a lot of alternatives.

[–] jbvlkt 2 days ago

Even if you do that why would you allow it outside VPN?

[–] cluckindan 1 day ago

You wouldn’t, but it would still remain an avenue for lateral movement