How to make sure that untrusted code running on worker nodes doesn't compromise manager node?

docker-archive / classicswarm

Swarm Classic: a container clustering system. Not to be confused with Docker Swarm which is at https://github.com/docker/swarmkit

Apache License 2.0

5.75k stars 1.08k forks source link

How to make sure that untrusted code running on worker nodes doesn't compromise manager node? #2890

Closed malhotrachetan closed 4 years ago

malhotrachetan commented 6 years ago

Assuming hosted environment where untrusted code is executed in worker nodes, how can one lock down the manager node to prevent compromise by untrusted worker nodes?