bastion

PodBastion is a lightweight, ephemeral SSH bastion solution designed specifically for Kubernetes environments. Deployed as a temporary pod, it facilitates secure SSH tunneling for developers and administrators, ensuring rapid yet safe access to specific services within the cluster. Based on the minimal alpine:3.18 image, PodBastion provides public key authentication while prohibiting root logins, merging simplicity with security.

A Terraform module for creating bastion host on AWS EC2 and populate its ~/.ssh/authorized_keys with public keys from bucket

Bastille template to bootstrap a 2fa openssh-server using pam_google_authenticator

Create a bastion host with autoscaling group in your public subnet with an elastic IP address that automatically re-attaches if the host is killed.

Setup a bastion host on a given public subnet

Terraform workspace that implements a secure web application infrastructure.