3 ms·
> ArgoCD not password protecting the Redis they deploy is amateur hour... An attacker would need to be inside your cluster/virtual/private network, no? You hav
by MuffinFlavored 2y ago
> ArgoCD not password protecting the Redis they deploy is amateur hour...
An attacker would need to be inside your cluster/virtual/private network, no? You have bigger problems after that, right? This is an internally facing, not-externally-exposed Redis instance?
- sofixa 2y agoYes, it's not an exploit that can be exploited unless you're already in the Kubernetes cluster; but it's an amazing privilege escalation, from being in the cluster to being full admin of it...