Securing AND Pentesting the Great Spaghetti Monster (k8s) by Kat FItzgerald

Kat Fitzgerald provides a comprehensive guide to auditing, pentesting, and hardening Kubernetes clusters. Demystifying the complex multi-layered architecture often termed the "spaghetti monster," she highlights how standard default configurations frequently introduce critical security exposures.

Fitzgerald analyzes container misconfigurations and common cluster breach vectors at 06:38, explaining Kubernetes namespaces and isolation boundaries at 10:06. At 13:46 and 17:21, she explores node security, guest operating system escapes, insecure kubelet endpoints, and excessive ClusterRoleBindings. She outlines practical testing workflows to discover privilege escalation paths and recommends foundational defensive baselines, including pod security admission controllers and network segmentation policies.

(AI summary — Gemini Flash)