Kubernetes Security

Kubernetes orchestrates containers at scale — and its security model is complex enough that misconfigurations are endemic. RBAC misconfiguration lets pods escape to cluster-admin. Exposed kubelet API allows unauthenticated pod creation. Unprotected etcd exposes every secret in the cluster. This covers kube-hunter, peirates, RBAC privilege escalation, and the hardening controls for each attack vector.