Piloting Around the Rocks: Avoiding Threats in Kubernetes
Talkat KubeCon + CloudNativeCon North America 2019 · on Wednesday, 2019-11-20· at 14:25· Pacific Ballroom, Salon 20-22 - Marriott Marquis San Diego Marina Hotel·
summary
Trail of Bits performs the first full security review of Kubernetes using source review, dynamic testing, and threat modeling, producing a reusable threat model artifact and public notes. The assessment surfaces surprising scale: about 37 source-level findings and 17 design/threat-model issues after scanning ~2.7M lines of code. Findings include credentials mounted in pods, silent or misdocumented policy failures, TLS and secrets gaps, and kubelet edge cases; the repo, templates and white paper aim to be immediately actionable.
AI-written summary · about
chapters (28)
- 0:00Introduction
- 0:10Robert Tonic
- 0:39Disclaimer
- 1:01Outline
- 1:29Keep it short
- 2:06Report
- 4:42Findings
- 7:04Logical Boundaries
- 9:03Data Flow Diagram
- 11:35Trust Zone Criticality
- 13:57Policies
- 16:49Secrets
- 18:26Key takeaways
- 19:25Review your environment
- 19:35Evaluate component data flow
- 19:54Define trust zones
- 21:15Discuss assumptions
- 21:53Review the source code
- 22:26Remediation
- 23:20Summary
- 24:34Shoutouts
- 26:22Recommended approach for secrets
- 28:23What you should take away
- 29:51Breaking down the question
- 31:19Do these findings apply to Kubernetes
- 32:32Does this need to be known by developers
- 34:26Are there any risks that can only be mitigated through thirdparty plugins
- 36:27What are the areas of improvement in Kubernetes
related talks
36mThe Devil in the Details: Kubernetes’ First Security Assessment
37mThreat Modelling: How to Improve Your Kubernetes Security Posture with Threat Mod...
19mHow to Secure Your Kubernetes Clusters
38mThreat Modelling Kubernetes: A Lightspeed Introduction
35mKubernetes Security - Challenge and Opportunity?
19mKubernetes Security: Navigating the Real-World Challenges
11mKeynote: Securing Kubernetes, the Upstream Way
22mSecuring Kubernetes