Pentesting Multi-tenant Kubernetes Clusters
Enterprise Kubernetes deployments require more than your average pentest.
Pentesting Multi-tenant Kubernetes Clusters Virtue Security
Kubernetes often creates an over-looked ecosystem of network and application infrastructure. As enterprise teams deploy more complex workloads into these environments, pentesting the presumed security boundaries can be a tedious and time-consuming task.
In this talk, Nick Coblentz walks through important test cases for Kubernetes and showcases time-saving features of virtuekube that can help pentesters assess large clusters.
Key Topics
- Understanding Kubernetes benefits
- Complexity created by cluster sprawl
- Role-based access controls
- Self-service multi-tenant features
- Pod isolation and blast radius
- Enumerate network services and accessible pods
- Discovering secrets and sensitive data
About The Speaker
Nick Coblentz
Senior Lead Penetration Tester
As a senior penetration tester at Virtue, Nick focuses on application security and cloud penetration testing.