# Pentesting Multi-tenant Kubernetes Clusters

Enterprise Kubernetes deployments require more than your average pentest.

[Pentesting Multi-tenant Kubernetes Clusters](https://www.youtube.com/watch?v=BKWedbzpm7A) [Virtue Security](https://www.youtube.com/channel/UCpPzgD3xt6o5jtO6bT2FUtA)

Kubernetes often creates an over-looked ecosystem of network and application infrastructure. As enterprise teams deploy more complex workloads into these environments, pentesting the presumed security boundaries can be a tedious and time-consuming task.

In this talk, Nick Coblentz walks through important test cases for Kubernetes and showcases time-saving features of [virtuekube](https://github.com/VirtueSecurity/VirtueKube) that can help pentesters assess large clusters.

## Key Topics
- Understanding Kubernetes benefits
- Complexity created by cluster sprawl
- Role-based access controls
- Self-service multi-tenant features
- Pod isolation and blast radius
- Enumerate network services and accessible pods
- Discovering secrets and sensitive data

## About The Speaker

**Nick Coblentz**  
Senior Lead Penetration Tester  
- [LinkedIn profile](https://www.linkedin.com/in/ncoblentz)

As a senior penetration tester at Virtue, Nick focuses on application security and cloud penetration testing.