Exploiting a Kubelet running on default configuration | by Arun Prasad | CloudLego | Mar, 2021 | Medium medium.com
In this post we will try to understand the consequences of running a kubelet with default configurations. Kubeadm is one of the preferred tools to deploy a kubernetes cluster since it is simple to use and it handles lots of tasks in the background which otherwise might be prone to errors when done manually. Any cluster deployed through kubeadm will follow security best practices. This means that the components deployed in the cluster will be configured in such a way that it wont be an easy task to comprise the cluster completely. A simple example would be of encrypting communication between components using TLS (SSL certificates). Another example is of disabling the default configurations (anything related to authentication,authorization and security) of all the components.
Report Story