News for hackers. Stuff that matters.

A comment on Sshole. Parent comment

Re:Sshole by cluckindan on Thursday November 05, 2026 @11:22AM (#50381062)
Probably a lot of companies which have their own k8s cluster and segregate kubectl access to operations only. Developers still need a way to their app backend in some cases.
[ Parent | on HN ]
Re:Sshole by chuckadams on Thursday November 05, 2026 @11:38AM (#50381250)
Kubernetes already comes with better solutions for that sort of thing. I could see a ssh bastion container for bridging to legacy infrastructure though. Manage its keys right and it's probably more secure than a lot of alternatives.
[ Parent | on HN ]
Re:Sshole by jbvlkt on Thursday November 05, 2026 @02:30PM (#50383325)
Even if you do this why allow it outside VPN?
[ Parent | on HN ]
Re:Sshole by cluckindan on Friday November 06, 2026 @07:00AM (#50391335)
You wouldn’t, but it would still remain an avenue for lateral movement
[ Parent | on HN ]