Scripting and notes from KubeCon NA 2020 presentation "PKI the Wrong Way". You may wish to watch it on YouTube: https://www.youtube.com/watch?v=gcOLDEzsVHI
Most of the misconfigurations exploited in this demo have corrections in demosetup.sh
and are marked with # fixme
for ease of finding.
I've been running this on Ubuntu 20.04.
Offhand, you'll need to install the following tools in addition to the usual Ubuntu stuff:
- docker
- vault
- jq
- kind
- kubectl
- etcdctl