Lets secure our Kubernetes cluster
summary
Claims that 60% of Fortune 500 clusters were easily breached and a 2018 incident where Tesla dashboard exposed lead to concrete failures: attackers used dashboard access to read an AWS secret and run crypto miners. Docker Hub analysis shows ~15 million repos but only 176 official images, with JFrog finding 4.6M imageless repos and ~30–35 crypto‑mining images. Remedies shown are actionable: use ClusterIP/port‑forward, strict RBAC, Trivy scans, distroless base images and admission controllers like OPA/image‑policy webhooks.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:00Most Kubernetes clusters are unsecured
- 3:43Tesla Hack
- 4:45Learnings
- 6:27Docker Hub
- 7:48Imageless repos
- 8:50Crypto mining
- 9:26Security tips
- 10:21Key takeaways
- 10:45Outro
related talks
32mContainer Security: Exploits, Vulnerabilities and Defense
35mInsights into Unsecured Kubernetes in the Wild
31mPrepare to Be Boarded! A Tale of Kubernetes, Plunder, and Cryptobooty
25mAll Your Containers Are Belong to Us
38mKubernetes Security: Attacking and Defending K8s Clusters
28mWhere Are All of the Container Breaches?
30mBelow the Radar: Identifying Hidden Threats Within the Development Ecosystem
38mKubernetes Security: Attacking and Defending K8s Clusters