News for hackers. Stuff that matters.

A comment on AWS Controllers for Kubernetes. Parent comment

Re:AWS Controllers for Kubernetes by cactus2093 on Tuesday August 25, 2020 @04:00PM (#24275454)
I think you have mostly the same problems in Terraform, Pulumi, or Cloudformation though right? Is there anything that makes it easier to accidentally do in k8s?

One layer of defense in all of these cases is keeping the IAM credentials that the configuration management tool uses from having any deletion permissions.

[ Parent | on HN ]
Re:AWS Controllers for Kubernetes by scarface74 on Tuesday August 25, 2020 @06:57PM (#24277238)
That’s an excellent idea. I never thought about that. In hindsight, it makes perfect sense.

Also, set the DeletionPolicy in CF to false.

[ Parent | on HN ]