OWASP Kubernetes in-depth - Nigel Douglas
summary
OWASP Kubernetes T10 (launched 2022) maps ten concrete cluster risks and practical fixes: analysis of 22,000 images finds 83% of images have vulnerabilities and cluster telemetry shows 72% of containers live <5 minutes, so runtime detection matters. Recommendations include image signing with cosign, admission deny rules via OPA Gatekeeper, runtime alerts with Falco, registry scanning, RBAC auditing (rback-audit / crane), Calico network policies, etcd snapshots and TLS, and centralized Prometheus + Grafana logging.
AI-written summary · about
chapters (10)
- 0:00Introduction to OWASP Kubernetes
- 2:10Why Kubernetes security matters
- 7:44Insecure workload configurations
- 12:35Supply chain vulnerabilities
- 15:00Overly permissive RBAC
- 17:30Network segmentation risks
- 20:36Secrets management failures
- 23:00Outdated Kubernetes components
- 24:44Addressing OWASP risks
- 25:26Q&A on Falco and tools
related talks
51mIntroducing the OWASP Top 10 for Kubernetes
22mIntroducing the OWASP Top Ten for Kubernetes
22mSecuring Kubernetes
34mKubernetes Security 101: Best Practices to Secure Your Cluster
35mKubernetes Security - Challenge and Opportunity?
36mThe Devil in the Details: Kubernetes’ First Security Assessment
38mFrom Risks to Resilience: Leveraging CNCF Projects Against Kube...
19mKubernetes Security: Navigating the Real-World Challenges