Hacker News new | ask | show | jobs
by nodesocket 65 days ago
I also used to work with on-premise installs of Kubernetes and their “security” postures prevented any in-bound access. It was a painful process of requesting access, getting on a zoom call and then controlling their screen via a Windows client and putty. It’s was beyond painful and frustrating. I tried to pitch using a tool like Twingate which doesn’t open any inbound ports, can be locked down very tight using SSO, 2fa, access control rules, and IP limiting but to no avail. They were stuck in their Windows based IT mentally.
2 comments

At least they didn't ask you to TeamViewer into a Windows Server 2012 box and open Event Viewer..
That would be my preference compared to the situation you're replying to. Event Viewer is powerful if one takes some time to learn it.
Fair point
For most enterprises there's too many jobs on the line to replace windows.

The people who know where to click and which dialog will pop up and when to click next are never going to agree to replace their non-automatable windows servers with fully automatable linux servers.

I mean, we're talking about a demographic that can't use ssh, never been on a platform using system package managers, and has little to no ability to version system changes.

They do all that manually.

>non-automatable windows servers

They are fully automatable, actually. Powershell is all you need fo that, plus, maybe, Active Directory.