🚨 LAST CHANCE! 🚨
Rejekts Amsterdam CFP closes TOMORROW!
🚀 Share your rejected cloud-native ideas.
➡️ sessionize.com/cloud-native-rejekts-eu-2026
Cloud Native Rejekts is on now!
My talk at #cloudnativerejekts last week was about how attackers might look to get persistence in a #Kubernetes cluster once they've compromised it.
One of the ideas I talked about was using Tailscale to run as kind of reverse shell giving access from the attacker's systems outside the cluster.
Didn't have time for a lot of details in the talk, but I promised a blog with some more information. Here's the blog!
https://raesene.github.io/blog/2024/03/24/Using-Tailscale-for-persistence/
For those at @Rejekts today…
I’ll be speaking in Room 1 today at 2pm. Would love to see lots of you there to tell you all about the worst case scenario with webhook! 😱
https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-na-chicago-2023/talk/XX3HWC/
Webhooks in Kubernetes play an essential role in extending the functionality of the cluster and go a long way towards the power Kubernetes offers. However, as with any technology, they also come with their set of risks and even potential disaster. In this talk we’ll go through scenarios that could possibly impact an otherwise healthy Kubernetes cluster by making use of a misconfigured or malicious webhook. Can we take down the whole cluster? Can we block access to others? For each risk we’ll take a look at the ways we can try to avoid them or mitigate their impact, if at all possible. By attending this talk, attendees will gain a better understanding of the potential risks associated with webhooks and the measures they can take to ensure a more secure and stable Kubernetes cluster.