KubeDay Colombia 2024

The complexity of Kubernetes, combined with the dynamic nature of Role-Based Access Control (RBAC), presents unique security challenges, particularly regarding user actions and access control. This presentation delves into Kubernetes auditing mechanisms to track user activities and analyze potential security issues arising from misconfigured permissions, roles, or user activities. Examination of the Kubernetes auditing landscape, detailing the structure of the Kubernetes Audit API and the critical events that need monitoring. Moreover, we provide a thorough analysis of common user-related security issues within Kubernetes, such as privilege escalation, unauthorized access, and resource misuse, explaining how auditing can be instrumental in their early detection and mitigation. The goal is to equip administrators and security teams with actionable audit insights to protect their Kubernetes deployments against the ever-evolving cyber threat landscape.