Earlier quoted context omitted.
I also used to work with on-premise installs of Kubernetes and their “security” postures prevented any in-bound access. It was a painful process of requesting access, getting on a zoom call and then controlling their screen via a Windows client and putty. It’s was beyond painful and frustrating. I tried to pitch using a tool like Twingate which doesn’t open any inbound ports, can be locked down very tight using SSO,…
For most enterprises there's too many jobs on the line to replace windows. The people who know where to click and which dialog will pop up and when to click next are never going to agree to replace their non-automatable windows servers with fully automatable linux servers. I mean, we're talking about a demographic that can't use ssh, never been on a platform using system package managers, and has little to no ability…
They are fully automatable, actually. Powershell is all you need fo that, plus, maybe, Active Directory.