Скачать или смотреть Kubernetes Exposed: One Yaml Away from Disaster - Assaf Morag & Michael Katchinskiy, Aqua Security

Kubernetes Exposed: One Yaml Away from Disaster - Assaf Morag & Michael Katchinskiy, Aqua Security

K8s security is a popular topic, and as such there are many theoretical talks about it, but we want to illustrate a different angle here, we will present our actual experience from the battlefield!
As Kubernetes is in the peak of its popularity, it isn't surprising that there're over 1.1 million clusters connected directly to the internet. Some clusters can be exploited due to human error and among them you can even find Fortune 500 companies.
We will explain what are the typical errors we see in the wild, how they may lead to exposure and as attackers gain access to a company's software development life cycle how they can compromise critical systems.
We will also talk about real campaigns attacking and exploiting clusters, what we’ve learned from them and how to detect the security issues and mitigate them.