steren’s Twitter Archive—№ 4,476

nehbit You are totally right. If you go the declarative route, the only thing that should be allowed to apply your configuration files is your CI/CD system. In this model, developers have read only permissions on all resources and all must go through a repo where these YAMLs are stored