Kubernetes Security Lab | Rawkode Live

In this episode, Rory will run us through his Kubernetes Security Lab
#KubernetesTutorial #Tutorial

🍿 Rawkode Live

#RawkodeLive

🕰 Timeline

00:00 - Holding screen
00:30 - Introductions
02:00 - What is the Security Lab?
06:20 - Launching the Client Machine
11:00 - Lab 1: APIServer Insecure Port
26:40 - Lab 2: Kubelet NoAuth
40:00 - Lab 3: Etcd NoAuth
57:00 - Lab 4: Privileged Pod
1:09:00 - Lab 5: Helm 2's Tiller

👥 About the Guests

Rory McCune

AquaSecurity

🔨 About the Technologies

Kubernetes

Kubernetes is a portable, extensible, open-source platform for managing containerized workloads and services, that facilitates both declarative configuration and automation. It has a large, rapidly growing ecosystem. Kubernetes services, support, and tools are widely
available.
The name Kubernetes originates from Greek, meaning helmsman or pilot. Google open-sourced the Kubernetes project in 2014. Kubernetes combines over 15 years of Google's experience running production workloads at scale with best-of-breed ideas and practices from the community.
Designed on the same principles that allows Google to run billions of containers a week, Kubernetes can scale without increasing your ops team.
Whether testing locally or running a global enterprise, Kubernetes flexibility grows with you to deliver your applications consistently and easily no matter how complex your need is.
Kubernetes is open source giving you the freedom to take advantage of on-premises, hybrid, or public cloud infrastructure, letting you effortlessly move workloads to where it matters to you.

#CloudNative #Kubernetes

[CloudNativeJanitor]

scary 😨!  Another awesome session from Rawkode, I missed the live stream, still, thank you for making it happen. and thank you Rory and Fabian for this precious lab to get more acquainted and familiar with k8s security. every time I listen to Rory I learn a lot of new things.

[IamNicoGreen]

I made a tutorial video for installing this project (kube-security-lab), I hope you all find it useful :)