Kubernetes Security Demo: Exposed secrets via powerful service accounts

This is a short demo on how Kubernetes Secrets and ConfigMaps can be exposed via powerful service accounts mounted on the pods even if the Kubernetes user doesn’t have enough permission to access any Secret or ConfigMaps. If you want to scan your Kubernetes pods and discover any exposed Secrets and ConfigMaps, check out this handy tool that I developed - https://github.com/jaydenaung/K8s-SAProbe

Видео Kubernetes Security Demo: Exposed secrets via powerful service accounts автора КодоГалактика