
Kubernetes Podcast from Google
Kubernetes Pen Testing, with Jesper Larsson
Nov 29, 2023
Jesper Larsson, a Freelance PenTester, discusses the importance of security in Kubernetes and infrastructure as code. They cover topics such as access permissions, web application vulnerabilities, pen testing experiences, and common mistakes to avoid. Jesper also shares his background in hacking and penetration testing, emphasizing the significance of networking at meetups. The podcast explores vulnerabilities in third-party software companies and the limitations of using example code. They also discuss an AI tool for analyzing overprivileged accounts in Google Cloud.
51:13
Episode guests
AI Summary
Highlights
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Storing secrets in ConfigMaps is a common mistake and not a secure storage solution for sensitive information.
- Understanding the differences between Kubernetes RBAC and IAM roles is crucial for secure access management in cloud environments.
Deep dives
Common Mistake 1: Using ConfigMaps for secrets
Jesper Larsen emphasizes the common mistake of using ConfigMaps to store secrets, even though it is explicitly mentioned in the documentation that it is not a secure storage solution for sensitive information.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.