A secure software factory on Incus, not on Kubernetes
The post is about building a secure, sovereign software factory on top of an Incus-based private cloud, using open-source tools such as Forgejo, ephemeral runners, Pulp, Cosign, and OpenBao. Instead of Kubernetes being used as the foundation, workloads are isolated by tenant and network. Challenges including key management, runner isolation, network security, and a self-service portal are discussed.
[link] [留言] Read original: https://www.reddit.com/r/programming/comments/1wdi83x/a_secure_software_factory_on_incus_not_on/
原文：https://www.a8q9.cn/en/article/en-a-secure-software-factory-on-incus-not-on-kubernetes.html