Hands-on Workshop: Batten Down the Hatches! A Cluster Security Journey
summary
Hands‑on lab that boots a GKE cluster in Cloud Shell, clones a workshop repo and runs a 70‑minute audit workflow: inventory APIs/images, deploy example workloads, and apply defenses. Demonstrations show public images running as root, then blocked by securityContext settings like runAsNonRoot and readOnlyRootFilesystem; switching to an unprivileged nginx image lets pods run. Uses scanners (Grype/Trivy/Clair mentioned) and kubeaudit to surface misconfigurations, and shows RBAC pitfalls with list vs get — the lab scripts run and the guardrails prevent unsafe deployments.
AI-written summary · about
chapters (6)
- 0:00Cluster security intro
- 1:24Setting up & auditing cluster
- 19:17Asset inventory
- 31:49Hardening workloads
- 58:27RBAC vulnerabilities
- 1:01:51Final audit & Q&A
related talks
01h 24mTutorial: Attacking and Defending Kube...
01h 07mTutorial: Bullet-Proof Kubernetes: Learn by Hacking
02h 00mKubernetes Security for Developers.
45mKubernetes Runtime Security
02h 42mSecuring Your On-Premise Kubernetes Cluster from Scratch
30mA secure journey on Kubernetes
01h 37mLines of Defence – Securing Your Kubernetes Clusters
40mHacking and Hardening Kubernetes Clusters by Example [I]