Attacking Argo CD with Argo CD and Defending Against Privilege Escalation

Explore how a lax RBAC configuration in Argo CD can lead to privilege escalation and learn defensive strategies in this 31-minute conference talk. Begin with a simple attack scenario and progressively implement stricter Argo CD RBAC and Project restrictions to prevent vulnerabilities. Gain valuable insights into the essential process every Argo CD administrator should follow when configuring RBAC and Project settings to enhance security. Understand the potential risks associated with Argo CD's management of Kubernetes resources and its own structure as a set of Kubernetes resources.

Attacking Argo CD with Argo CD (and then Defending) - Michael Crenshaw, Intuit