PS: How is your automated provisioning system reaching your cluster if not by SSH?
Saltstack is either using SSH to communicate or opening it's own port. I'd much rather trust an open ssh port for securely provisioning/management than allow any other piece of software to keep a port open (upto and including TLS based protocols).
This allows me to have one central server that is well secured and protected that allows ingress from the remote hosts, and then all the clients reach out to the master to get their tasks.
I build machine images with packer that get provisioned during the deployment pipeline. That single machine is then put into a cluster with x number of copies. If one dies I don't care, the cluster provisions another automatically.
Not sure about moondev, but Terraform + Cloud-init + Container Orchestrator means that I basically never need to SSH into my nodes, except in extreme/rare circumstances.
So you do need ssh after all?
I guess that's an offensive thing to point out judging by my score...
>I said "I basically never need to". Not that I never need to. But yeah, I basically never, ever need to
It is interesting to imagine why this innocuous comment has ruffled so many feathers.