Re:AWS Controllers for Kubernetes
by ForHackernews on Tuesday August 25, 2020 @03:44PM
(#24275232)
"cattle, not pets" is a nice slogan, but I think most ranchers would be angry if a junior ranch hand accidentally poisoned the entire herd with a typo.
Assume anyone can destroy your infrastructure at any time (by mistake or otherwise). This could be done with cloudformation, terraform, API calls, and essentially any automation(with different levels of safeguards).
Be prepared for that. Be careful with your data. Not so careful with individual servers - they should be cattle, not pets.
EDIT: If this is a production system, one could take away any 'delete' permissions until they are needed again.