zdbc VS z_archived_kubectl

OpenZiti could be the ticket, it's an open source solution that provides an overlay network built on zero trust principles (more secure than a VPN). Bonus, we took one of our SDKs and wrapped it around JDBC so that for users to access the DB, they do not need to have a VPN client; they just use 'ZDBC' instead of JDBC - https://github.com/openziti-test-kitchen/zdbc

You can use agents or their ZDBC, which is one of the most amazing things (as they work with APIs you can embeded their SDK into your code, so no agents are required).

- Example zitifications: https://github.com/openziti-test-kitchen/zdbc & https://openziti.github.io/articles/zitification/prometheus/part1.html

Would be great to have thoughts, comments, etc - https://github.com/openziti-test-kitchen/zdbc or https://www.youtube.com/watch?v=H6o5z6iXYPQ&ab_channel=Percona

Congrats on the launch. Well done.

another security approach is to enable your customers to close their inbound firewall ports and link listeners. this helps cloud and on prem models have far stronger security.

example here (disclosure: i am a founder of the company behind this solution) with both open source and OEM/SaaS models:

https://github.com/openziti-incubator/zdbc (code for one implementation - a wrapper around the JDBC drivers)

https://netfoundry.io/zero-trust-database-security/ (blog post with links to developer example video, whitepaper, etc)

Did I mentioned they also have K8's resources? Not only to install their ZT solution but also to manage K8's (they have a "zitified" version of kubectl.