2 ms·
I’ve been writing and managing development platforms on Kubernetes for 6-7 years. In this time, I remember having to SSH into a host node exactly once. This wa
by cassianoleal 2y ago
I’ve been writing and managing development platforms on Kubernetes for 6-7 years.
In this time, I remember having to SSH into a host node exactly once. This was me, the platform engineer - not an application developer. Even then, having is a strong word. I could have just as well done with a privileged container with host access.
Application developers have nothing to do on the host. As in, they gain nothing from it, and could potentially make everything worse for themselves and the other applications and teams on the platform.
- breadwinner 2y agoI was talking about logging into the container, not the node. Is Talos an OS for the node or the container?
- cassianoleal 2y agoFor the nodes. For the containers there's things like Google's distroless which are great for reducing attack surface as well.
- breadwinner 2y agoTheir website only says it is "for Kubernetes", that could mean containers, nodes or both.
- cassianoleal 2y ago> Supports cloud platforms, bare metal, and virtualization platforms > Production ready: supports some of the largest Kubernetes clusters in the world > It only takes 3 minutes to launch a Talos cluster on your laptop inside Docker. > delivers current stable Kubernetes Whilst you're not wrong, and the website could be clearer, there are plenty of clues.