Auditing Kubernetes Users: Tracking Security Holes
summary
Kubernetes auditing mechanisms and the Kubernetes Audit API are examined to show how to track user activities and important audit events. The talk analyzes user-related security problems—privilege escalation, unauthorized access, and resource misuse—and explains how audit logs and RBAC-aware auditing can detect and help mitigate misconfigured permissions and risky user actions.
AI-written summary · about
chapters (8)
- 0:00Kubernetes audit intro
- 2:09Audit policy config
- 6:28Authentication & authorization
- 9:00Exploring audit logs
- 14:04Monitoring anonymous users
- 15:53Networking & IP audit
- 17:21Audit dashboards
- 17:43Conclusion
related talks
31mAuditing in Kubernetes 101
31mKubernetes RBAC Security: A Practical Overview
25mAuditing in Kubernetes 101
22mAudit in Kubernetes Now, and in the Future
34mKubernetes Security 101: Best Practices to Secure Your Cluster
35mRBAC to the Future: Untangling Authorization in Kubernetes
26mHacking into Kubernetes Security for Beginners
35mUsing K8s Audit Logs to Secure Your Cluster