Loading video player...
As Kubernetes leads the way in container orchestration, securing clusters has never been more crucial. A major threat is pod escape, where attackers breach container isolation to access the host system or other containers, potentially compromising the entire cluster. This talk demystifies the concept of pod escape in Kubernetes. We'll break down how misconfigurations, insecure defaults, and overlooked vulnerabilities can open doors for attackers. Through live interactive demos, you'll learn about common security pitfalls such as misconfigured security contexts, privileged containers, and sharing host namespaces. Not only will you learn about common mistakes and vulnerabilities, but you'll also discover best practices for container security, including setting up proper security contexts, enforcing the principle of least privilege, and effectively utilizing Kubernetes security features.