Replying to @lizthegrey @jogbert
If you qualify that with a *production* server then I agree entirely. No reason to prevent them from sshing a dev cluster for full-on debugging. Dev clusters should have sanitised data anyway

Mar 12, 2019 ยท 7:58 PM UTC

1
1
This tweet is unavailable
That's a risk, I agree, but as you say, there's compliance issues at stake. I guess your best bet at that point is that you have to have some kind of shoulder-surfing checker watching any prod-read-only-access for compliance, which is limited to determining a test case to add.
1
1