BSidesSF 2026 - RBAC Atlas: Mapping Real-World Kubernetes Permissions and... (Lenin Alevski)

In this talk, Lenin Alevski discusses the importance of Role-Based Access Control (RBAC) as a protective measure against potential breaches within Kubernetes environments. He introduces RBAC Atlas, a comprehensive index designed to map real-world Kubernetes permissions and identify over-permissive RBAC policies in widely-used projects. The session highlights critical insights into how these permissions can expose vulnerabilities and what steps can be taken to mitigate risks.