Talk Deep Dive
summary
Demo shows cluster hijack is frighteningly easy and argues security pods belong in every build pipeline. Concrete fixes: don't run privileged pods, use read-only filesystems and remove shells/netcat, and avoid hostPath mounts. Detection and runtime tooling recommended: Falco, Pixie, Inspector Gadget to alert on unexpected bash, API-server access, or outbound sockets, plus OPA Gatekeeper policies to enforce manifests and block unsafe fields before deployment.
AI-written summary · about
related talks
22mSecurity Showdown: The Overconfident Operator Vs the Nefarious...
38mA Treasure Map of Hacking (and Defending) Kubernetes
01h 37mLines of Defence – Securing Your Kubernetes Clusters
38mKubernetes Security: Attacking and Defending K8s Clusters
54mUnderstanding and Mitigating Privilege Escalation Threats in Kubernetes
44mStranger Danger - hack my misconfigured Kubernetes
30mA secure journey on Kubernetes
01h 24mTutorial: Attacking and Defending Kube...