3 ms·
Yeah, we investigated that route, but on stateless containers it seemed really cumbersome? I don't remember exactly why now, but isn't there some problem with
by filleokus 6y ago
Yeah, we investigated that route, but on stateless containers it seemed really cumbersome?
I don't remember exactly why now, but isn't there some problem with the ephemeral nature of the container? Like that each instance of the container needs their own service account or something?
> What Windows containers offers are Group Managed Service Accounts which reduces the administrative overhead managing service accounts for Linux containers and makes them completely transparent to the container.
Aah, yeah, that seems nice.
- nullify88 6y ago> Yeah, we investigated that route, but on stateless containers it seemed really cumbersome? I agree, it could be cumbersome without something to manage the secrets. I use OpenShift / k8s at work so injecting these secrets is trivial.