Kubernetes Threat Model (16%)

• Threat modeling helps you identify potential threats, understand their impact, and put measures in place to prevent them
• Understand how traffic/data flows in the environment and identity vulnerabilities at each point

Persistence

• Once an attacker accesses the environment, the first goal is typically to establish persistence.
• Persistence allows attackers to maintain access to a cluster

Denial of Service

• Set resource quotas to prevent excessive resource usage
• Restrict service account permissions
• Use Network Policies and firewalls to control access
• Monitor and alert on unusual activity