Loading…
In-person
1-4 April 2025
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon Europe 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in British Summer Time (BST) (UTC +1). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change and session seating is available on a first-come, first-served basis. 
or to bookmark your favorites and sync them to your phone or calendar.
Type: Tutorials clear filter
Friday, April 4
 

13:45 BST

Tutorial: Hacking up a Storm With Kubernetes - Rory McCune, Datadog; Marion McCune, ScotSTS; Iain Smart, AmberWolf
Friday April 4, 2025 13:45 - 15:00 BST
We'll provide a kind (https://kind.sigs.k8s.io/) cluster configuration and all of the required manifests to deploy our interactive environment on your own machines. Please bring a laptop capable of running a kind cluster and have kind installed before we start.

If you'd like to get hands-on hacking Kubernetes cluster, this is the tutorial for you! Join us as we walk through hands-on examples of how attackers can try and compromise Kubernetes clusters and what you can do to make sure it doesn't happen to you.

We'll be exploring some of the in-depth parts of cluster architecture that you may not get to look at every day with hands-on exercises that you can try out during the tutorial or takeaway and work on later.

So if you've ever wondered what the Kubelet API is, how Kubernetes does authentication or authorization or how someone could use "the most pointless Kubernetes pod ever" to get root access to your cluster nodes, then join us and find out!
Speakers
avatar for Iain Smart

Iain Smart

Principal Consultant, AmberWolf
Iain is a Principal Security Consultant at AmberWolf, where he attacks and reviews cloud-native environments. Since discovering that public speaking really isn’t that scary, he has presented at various conferences including KubeCon EU and BlackHat. He enjoys playing with new technologies... Read More →
avatar for Marion Mccune

Marion Mccune

Security Tester, ScotSTS
App Sec pentester with an interest in the security side of containerization. Live in the Highlands of Scotland with my husband and three cats. Interests are the outdoors, history, cookery and drawing.
avatar for Rory McCune

Rory McCune

Senior Security Researcher and Advocate, Datadog
Rory is a senior security researcher & advocate for Datadog who has extensive experience with Cyber security and Cloud native computing. In addition to his work as a security reviewer and architect on containerization technologies like Kubernetes and Docker he has presented at Kubecon... Read More →
Friday April 4, 2025 13:45 - 15:00 BST
Level 1 | Hall Entrance N11
  Tutorials, Security
 

Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.
  • 🚨 Contribfest
  • πŸͺ§ Poster Sessions
  • AI + ML
  • Application Development
  • Breaks
  • ⚑ Lightning Talks
  • Cloud Native Experience
  • Cloud Native Novice
  • CNCF-hosted Co-located Events
  • Connectivity
  • Data Processing + Storage
  • Emerging + Advanced
  • Experiences
  • Keynote Sessions
  • Maintainer Track
  • Observability
  • Operations + Performance
  • Platform Engineering
  • Project Opportunities
  • Registration
  • Security
  • Solutions Showcase
  • Sponsor-hosted Co-located Event
  • Tutorials