I watched all the security talks at KubeCon NA 2020. This is what I learned - видео

PK with Tabitha Sable Link: - Certificate with the O value set to system:masters is great to pillage because it is available even if the cert is deleted - Demo of Privilege Escalation with Vault misconfiguration - especially with CA Access Control - Etcd Pillaging with PKI compromise because Etcd relies on the API Server Cert Really cool exploit - etcd RBAC makes this attacker harder to do - grant user with etcd - root role with no password restrict access to only the api server....
Источник видео: RuTube.ru (Технологии и интернет)