<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Kubernetes on Tiago Carrondo</title><link>https://carrondo.pt/en/categories/kubernetes/</link><description>Recent content in Kubernetes on Tiago Carrondo</description><generator>Hugo</generator><language>en</language><lastBuildDate>Tue, 24 Aug 2021 00:00:00 +0000</lastBuildDate><atom:link href="https://carrondo.pt/en/categories/kubernetes/index.xml" rel="self" type="application/rss+xml"/><item><title>Create ssh jumpserver inside k8s cluster</title><link>https://carrondo.pt/en/posts/2021-08-24-create-ssh-jumpserver-inside-k8s-cluster/</link><pubDate>Tue, 24 Aug 2021 00:00:00 +0000</pubDate><guid>https://carrondo.pt/en/posts/2021-08-24-create-ssh-jumpserver-inside-k8s-cluster/</guid><description>&lt;hr&gt;
&lt;h2 id="the-task"&gt;
 The task
 &lt;a class="heading-link" href="#the-task"&gt;
 &lt;i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"&gt;&lt;/i&gt;
 &lt;span class="sr-only"&gt;Link to heading&lt;/span&gt;
 &lt;/a&gt;
&lt;/h2&gt;
&lt;p&gt;I need to access RDS instances inside a private VPC.&lt;/p&gt;
&lt;h3 id="limitations"&gt;
 Limitations
 &lt;a class="heading-link" href="#limitations"&gt;
 &lt;i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"&gt;&lt;/i&gt;
 &lt;span class="sr-only"&gt;Link to heading&lt;/span&gt;
 &lt;/a&gt;
&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;no ports should be exposed to world.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="the-basic-concepts"&gt;
 The basic concepts
 &lt;a class="heading-link" href="#the-basic-concepts"&gt;
 &lt;i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"&gt;&lt;/i&gt;
 &lt;span class="sr-only"&gt;Link to heading&lt;/span&gt;
 &lt;/a&gt;
&lt;/h3&gt;
&lt;p&gt;AWS SSM could be an option, but I don&amp;rsquo;t need an extra instance to manage (and pay) just for this.
If the solution goes inside a kubernetes cluster it became cloud agnostic and can be used on all providers (I currently have this need on gcloud also).&lt;/p&gt;</description></item></channel></rss>