We should have some jumphosts/bastion hosts in each region to facilitate ad-hoc troubleshooting, emergency deployments, etc.
In the previous model, the Jenkins host in us-west-2 was used for this reason but we would like to separate the CI environment from the SRE admin tasks, particularly with Jenkins being known for exploits.
We should have some jumphosts/bastion hosts in each region to facilitate ad-hoc troubleshooting, emergency deployments, etc.
In the previous model, the Jenkins host in us-west-2 was used for this reason but we would like to separate the CI environment from the SRE admin tasks, particularly with Jenkins being known for exploits.