Kubernetes Goat: A Vulnerable by Design Cluster for Learning Cloud Native Security
Madhu Akula introduces Kubernetes Goat, an intentionally vulnerable cluster environment designed to learn Kubernetes security, RBAC misconfigurations, and container escapes.
Summary
The Complexity of Cloud Native Security
Kubernetes orchestrates enterprise container workloads worldwide, but its vast API surface, complex RBAC controls, and network policies create severe security challenges.
Introducing the Kubernetes Goat Playground
Madhu Akula presents Kubernetes Goat, an open-source vulnerable-by-design environment mapping real-world cloud native security misconfigurations.
Hands-On Attack Scenarios and Cluster Compromise
Akula walks through practical attack scenarios—including SSRF in containerized web apps, exposed Docker/Kubelet sockets, RBAC token privilege escalation, and host breakout.
Hardening Best Practices for Cloud Native Infrastructure
The author provides defensive teams with admission controller policies, network segmentation rules, and least-privilege RBAC templates.
Related talks
Main Stage·38 min
Dagan Henderson · Will Kline
Dagan Henderson and Will Kline audit popular Kubernetes add-ons, exposing how third-party storage, logging, and observability tools introduce cluster takeover paths.
Cloud Village·2 hr 30 min
Magno Logan
Magno Logan delivers a comprehensive workshop on securing Kubernetes clusters, covering API servers, etcd, RBAC, admission controllers, and network policies.
Red Team Village·53 min
Kat Fitzgerald
Kat Fitzgerald breaks down Kubernetes architecture, demonstrating practical cluster penetration testing techniques and hardening controls.