[kwlug-disc] Saltstackgeddon

[Mikalai Birukou]

> On Wed, 2020/05/06 02:34:51PM -0400, Paul Nijjar via kwlug-disc <kwlug-disc at kwlug.org> wrote:
> | The tl;dr is that if your salt-master is accessible on the Internet
> | (via the Salt port) then ALL of your minions are compromised.
>
> You mean it's not a good idea to leave your management systems
> open to everyone on the internet?
>
> Geez, let me make a note of that.
You'd be surprised how many tutorials on youtube walk you through a 
setup of a cluster, using, ... what they call it, ... amazon instances, 
:) , and have master-minion traffic goes over the net.