Workshop: Kubernetes Security 101 Best Practices
Magno Logan delivers a comprehensive workshop on securing Kubernetes clusters, covering API servers, etcd, RBAC, admission controllers, and network policies.
Summary
Foundations of Kubernetes Cluster Architecture
Securing production Kubernetes clusters requires deep understanding of control plane components—including the API server, etcd datastore, kubelet daemons, and worker nodes.
Hardening Managed and Self-Hosted Clusters
Magno Logan explores configuration best practices across major cloud managed offerings (EKS, GKE, AKS) and bare-metal deployments.
Implementing Robust RBAC and Admission Controllers
Logan demonstrates how to configure Role-Based Access Control (RBAC) with least privilege and deploy Open Policy Agent (OPA) Gatekeeper admission controllers.
Container Runtime Security and Network Segmentation
The workshop provides actionable blueprints for securing pod-to-pod communications via CNI network policies and enforcing immutable container runtimes.
Related talks
Red Team Village·57 min
Madhu Akula
Madhu Akula introduces Kubernetes Goat, an intentionally vulnerable cluster environment designed to learn Kubernetes security, RBAC misconfigurations, and container escapes.
Red Team Village·53 min
Kat Fitzgerald
Kat Fitzgerald breaks down Kubernetes architecture, demonstrating practical cluster penetration testing techniques and hardening controls.
Cloud Village·23 min
Madhu Akula
Madhu Akula introduces Kubernetes Goat, an open-source vulnerable-by-design Kubernetes cluster environment for hands-on offensive and defensive learning.