Assessing Kubernetes RBAC Misconfigurations with rbac-tool | Kubernetes Attacks Series

Welcome back to the channel! In this video, we are diving deep into Kubernetes Role-Based Access Control (RBAC) and how to effectively audit your clusters for security misconfigurations using rbac-tool. We kick things off with essential Kubernetes theory, breaking down the core RBAC model. We cover the critical differences between a Role (namespace-scoped) and a ClusterRole (cluster-wide), and explain exactly how permissions are applied to users and service accounts using RoleBindings and ClusterRoleBindings. Once the foundation is set, we jump into the terminal to run an audit on our cluster using rbac-tool. We walk through how to generate visual permission graphs and analyze who has access to what. Finally, we break down the pros and cons of rbac-tool—highlighting where it excels for quick visualizations and where it falls short (such as what permission paths or dynamic access configurations it misses). 💻 rbac-tool Demo & Commands: All the commands to deploy the demo environment and run the rbac-tool audits are fully documented on my GitHub. You can follow along here: https://github.com/Ruatelo/EKS-config... 🔗 Resources & References: Official Kubernetes RBAC Documentation: https://kubernetes.io/docs/reference/... rbac-tool GitHub Repository: https://github.com/alcideio/rbac-tool 🚨 DISCLAIMER: This video is strictly for educational purposes and ethical hacking. The techniques demonstrated are intended to help cloud security professionals, penetration testers, and system administrators understand and mitigate vulnerabilities within their own authorized environments. Never test these techniques on AWS or Kubernetes environments you do not own or have explicit permission to audit. If you found this RBAC audit breakdown helpful, please like, subscribe, and hit the notification bell for more Kubernetes security and exploitation videos! #Kubernetes #CloudSecurity #RBAC #EKS #Pentesting #EthicalHacking #K8sSecurity #InfoSec #CyberSecurity #DevSecOps