Скачать или смотреть Benjamin Koltermann - Fuzzing and Testing the Security of Kubernetes Admission Controllers

Session description:
Kubernetes is becoming ubiquitous and the new standard for running container workloads. This extremely fast adaptation of Kubernetes raises the challenge of Kubernetes security. If you are using Kubernetes, then you probably heard of Admission Controllers. But have you ever thought about the security of these?
This talk focuses on the Admission Controller configuration of Kubernetes and demonstrates how to test and fuzz it. Kubernetes ships the Admission feature, which allows to mutate or validate the different Kubernetes manifests. Admission controllers are essential for the security of a Kubernetes cluster, because they prevent misconfigurations even before the resources are created.
In this talk we will take a deeper look into Kubernetes Admission Controllers, show how they work, what they are used for and present a tool to test and fuzz the configuration, for potential security misconfigurations.

Connect with us!
Website: https://oredev.org
LinkedIn:   / oredev  
Twitter:   / oredev  
Facebook:   / oredev  
Instagram:   / oredev