Introducing the OWASP Top Ten for Kubernetes
summary
Community-curated OWASP Kubernetes Top Ten lists the ten highest-risk Kubernetes failure modes backed by practitioner data and already has ~400 stars and ongoing translations. It names misconfigurations, supply-chain risk, over-permissive RBAC, audit-log gaps, network segmentation, secret management, outdated components, etc., and points to concrete mitigations: Open Policy Agent/Gatekeeper for admission control, CIS benchmarks, image signing and SBOMs, KMS/Vault for secrets, and notes a recent list/watch RBAC secret leak write-up and workshop-ready tooling.
AI-written summary · about
chapters (9)
- 0:00Intro
- 3:11Insecure Workload Configurations
- 3:44Supply Chain Vulnerabilities
- 4:44Overly Permissive RBAC Configurations
- 7:40Lack of Centralized Policy Enforcement
- 10:44Broken Authentication Mechanisms
- 12:03Missing Network Segmentation Controls
- 14:52Misconfigured Cluster Components
- 16:34Outdated and Vulnerable Kubernetes Components
related talks
51mIntroducing the OWASP Top 10 for Kubernetes
32mOWASP Kubernetes in-depth - Nigel Douglas
38mFrom Risks to Resilience: Leveraging CNCF Projects Against Kube...
06mKeynote: Future-Proofing Kubernetes
22mSecuring Kubernetes: Best Practices for DevSecOps in the Cloud-Native Era
45mThe Top 10 List of Istio Security Risks and Mitigation Strategies
34mKubernetes Security 101: Best Practices to Secure Your Cluster
35mKubernetes Security - Challenge and Opportunity?