Lightning Talk: Why you Should Really Pay Attention to K8S Security Best Practices - Benjy Portnoy
summary
CIS publishes a 200+ page CIS Kubernetes Benchmark and omitting a few checks lets attackers exfiltrate secrets — Tesla had a publicly accessible cluster with anonymous dashboard access. Free tools automate checks and attacks: kube-bench runs the CIS tests, kube-hunter performs cluster penetration testing, and Aqua’s micro scanner breaks CI by detecting a vulnerable nginx image and failing the build, proving misconfigurations and bad images lead to real compromise.
AI-written summary · about
chapters (4)
related talks
10mLightning Talk: Kubernetes Risk Assessment: Time to go one level deeper
34mKubernetes Security 101: Best Practices to Secure Your Cluster
22mSecuring Kubernetes
19mHow to Secure Your Kubernetes Clusters
26mBoost your security and resiliency in Kubernetes
26mKubernetes Risk Assessment: Time to Go One Level Deeper
46mContinuous Kubernetes Security
19mKubernetes Security: Navigating the Real-World Challenges