News for hackers. Stuff that matters.
Re:NSA Kubernetes Hardening Guidance [pdf] by EthanHeilman on Wednesday August 04, 2021 @11:35PM (#28069562)
What if you end up spinning more than one container for that service?

How are these containers getting the different secrets they need to identify themselves? Are you attaching IAM roles to them to get secrets from some secret store?

Re:NSA Kubernetes Hardening Guidance [pdf] by amarshall on Thursday August 05, 2021 @12:39AM (#28069933)
Said it twice before: differently complex. There are plenty of potential “solutions” to the specific scenario you’re describing, but my original comment was more “generally consider X instead of Y so you don’t have to care about Z” rather than “use X in this specific way and it will simply solve every problem with Y”.