Re:Tailscale Kubernetes Operator
by pphysch on Friday September 22, 2023 @01:40PM
(#37615092)
There have been a lot of container escape exploits
[ Parent
| on HN ]
Re:Tailscale Kubernetes Operator
by johnmaguire on Friday September 22, 2023 @02:02PM
(#37615405)
Sure... but it's still not "the same as" running on your host.
That depends on how you're running it. You wouldn't want a compromised image to be the base for your build containers, which get access to your product's source code via volume mount, or to secret keys via environment variables.