3 ms·
It's not about RBAC at all. Goal is not to expose ssh socket to the Internet! ssh tcp is encapsulated in https packet and ONLY after successful certificate auth
by betaby 2y ago
It's not about RBAC at all.
Goal is not to expose ssh socket to the Internet!
ssh tcp is encapsulated in https packet and ONLY after successful certificate auth by HAProxy.
- aflukasz 2y agoRight, but now your are exposing HA proxy socket to the Internet. Why is that better?