Re:NSA Kubernetes Hardening Guidance [pdf]
by throwaway984393 on Tuesday August 03, 2021 @05:17PM
(#28054345)
They may suck at building containers, but this also sounds like a release management issue. Both the producers and consumers of the release need a test suite to validate the new artifacts before they can make it into a pipeline to eventually deliver to a customer use case. (But also they should 100% not be copying random binaries)
For what it's worth I've seen worse from corporations. Bad hires lead to bad systems.
For what it's worth I've seen worse from corporations. Bad hires lead to bad systems.