Hello,
As the title suggests, how do you manage your DBs for docker services.
Do you spin a new DB for every new docker cluster or do you have a centralized DB that is accessible to the docker clusters.
What are the pros and cons of both method?
For the moment, I spin a new DB for every services as I feel it is easier to backup the service in case of a problem.
//Edit: terminology improvements
One per service. Not just because it’s easy, but because it allows you to minimise blast radius. If you’re running one
DBDBMS percontainerservice and one container gets compromised, only that oneDBDBMS is compromised. With one centralisedDBDBMS for all containers, a breach of one container means access to the data of all containers that use this without the need for any lateral movement.How so? Each service uses its own database with credentials that provide access only to that database. Unless on top of a breach in your container there is some zero-day in your DBMS - which I find highly improbable - no other data will be affected.
Now, is it one DB per container
Or one DBMS+DM per container?
Apologies for being imprecise on terminology. I meant the latter, per service.