What are some alternatives to using bastion hosts for accessing private Kubernetes clusters?
Asked by
CuriousCoder88
Hello everyone! We have private Kubernetes clusters spread across AWS, GCP, and Azure. Managing bastion hosts for accessing these clusters is not ideal, so I'm on the lookout for secure alternatives that allow us to connect without having to rely on bastion hosts. Any suggestions?
Answers
You typically have two main options: either a bastion host or a VPN. If you haven't already, check out Cloudflare Zero Trust; they offer a free tier for up to 50 users, and you can run their tool, cloudflared, as pods in your cluster. We also previously used OpenVPN, and that worked well for us!
Reply to this answer
Have you thought about using Teleport for Kubernetes? It's a great tool for secure access as well.
Reply to this answer
Twingate could be another option for you; it operates on a VPN basis and might meet your needs!
Reply to this answer
Consider trying out Netbird or Tailscale for a simpler connection method.
Reply to this answer
If you're using GCP, they have DNS endpoints specifically designed for this purpose. I was actually a beta user when this feature rolled out, and I can say it really transforms cluster access in GKE!
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions