Redteam Views: Security Practice of K8s Cluster Administrator
Talkat KubeCon + CloudNativeCon + Open Source Summit China 2021 · on Thursday, 2021-12-09· at 12:10· Kubecon + CloudNativeCon 演讲厅, 虚拟会议 (Virtual)·
summary
Examines real-world attack techniques against Kubernetes clusters and Service Mesh, including container escape, bypassing Pod Security Policy, and lateral movement. Describes Tencent’s defensive practices for building secure, multi-tenant, large-scale Kubernetes clusters and presents real-world attack cases with corresponding solutions for protecting containers and data.
AI-written summary · about
chapters (12)
- 0:00Intro
- 0:45About Me
- 3:36K8s Security Features
- 5:32From the Office Network
- 10:10Try Privileged Container
- 17:46m... Node to Cluster Admin
- 18:56Defend?
- 21:15From the Production Network
- 22:30Real World Case 2
- 24:40Protect API Gateway Admin
- 28:19PodSecurity Policy Is Not a Secret Security Policy
- 31:30IPTABLES Still Work
related talks
43mKubernetes Security: Attacking and Defending Modern Infrastructure
35mKubernetes Security - Challenge and Opportunity?
09mKubernetes security: a team sport
33mKubernetes Security: Horror Stories to Help Secure Your Cluster
19mKeynote: Hello From the Other Side: Dispatches From a Kubernetes Attacker
29mKubernetes Security: Attacking and Defending K8s Clusters
38mKubernetes Security: Attacking and Defending K8s Clusters
25mSecuring Kubernetes Multi-Tenancy: Navigating Challenges Through DevSecOps Control and Visibility