Kubernetes Goat: Hands-On Kubernetes Security Learning
Madhu Akula introduces Kubernetes Goat, an open-source vulnerable-by-design Kubernetes cluster environment for hands-on offensive and defensive learning.
Summary
The Need for Hands-On Container Security Education
Securing containerized workloads running on Kubernetes requires practical experience exploiting real-world misconfigurations and container runtime flaws.
Architecture of the Kubernetes Goat Testbed
Madhu Akula presents Kubernetes Goat, a vulnerable-by-design environment engineered to simulate complex multi-tier container security vulnerabilities.
Exploring Real-World Kubernetes Attack Scenarios
Akula walks through live challenge scenarios—including container breakouts via privileged mounts, SSRF targeting the cloud metadata API, and exploiting RBAC misconfigurations.
Defensive Verification and Runtime Hardening
The author illustrates how defenders can use the platform to validate Falco runtime detection rules, OPA policies, and container scanning tools.
Related talks
Cloud Village·23 min
Mark Manning
Practical Kubernetes security techniques for both offensive and defensive practitioners.
Cloud Village·23 min
Madhu Akula
Spotter: a universal Kubernetes security engine for automated runtime threat detection.
Cloud Village·28 min
Michael Katchinskiy · Yossi Weizman
How official cloud installation scripts expose Kubernetes clusters and cloud environments to breach.