Re:NSA Kubernetes Hardening Guidance [pdf]
by zzyzxd on Tuesday August 03, 2021 @02:18PM
(#28052314)
You can't skip "spending a ton of time hardening one cluster" anyways.
Having multiple clusters may help reduce the blast radius of _certain_ attacks, to some degree. However, managing multiple clusters is a lot more difficult than managing one, and you will potentially replicate bad practices, vulnerabilities to multiple places and increase maintenance burden.
Having multiple clusters may help reduce the blast radius of _certain_ attacks, to some degree. However, managing multiple clusters is a lot more difficult than managing one, and you will potentially replicate bad practices, vulnerabilities to multiple places and increase maintenance burden.