To get started within the demo environment,
you're going to need to clone down the git repo that we leverage in this course.
Now I've already cloned down this repo, so I'm just going to erase this command.
Okay, then we simply cd into the repos directory.
Let's check out the install script.
So in general, this script installs the dependencies for the demo environment.
I've tested this on a fresh install of Kali Linux,
in other words, version 2021.1.0.
Let's scroll down to the brew installs.
We install minikube for running the local Kubernetes cluster,
k9s will help us inspect this cluster,
krew will allow us to install kubectl plugins.
Some people say kube cuddle, I'm just going to say kubectl.
Trivy allows us to inspect vulnerable Docker images.
Nmap is going to be used to search for different vulnerabilities,
and yq for pretty‑printing YAML.
Here we see the one dependency that is needed for
kube‑hunter and that is Docker.
We go ahead and install it through apt.
Kubeletctl will allow us to attack the kubelet.
Then we just set up some paths.
Then we install some kubectl plugins through krew.
Specifically, we install advise‑psp.
Advise‑psp will allow us to generate Pod security policies within Kubernetes.
We'll explore advise‑psp later on in the course.
Now this item is really important.
To make things easier, we're going to allow Docker to run as non‑root,
but for this item to take effect, we need to log out and log back into our shell,
once we run the installation script.
Okay, great!
It looks like we're done.
Now we're going to go ahead and run the installer.
Nice!
The installation is finished.
Okay, so we must log out and back into the shell for the changes to take effect.
Okay, so now we're logged back into the shell.
We are going to cd back into the repos directory
and execute the start.sh script.
This script starts the demo environment.
Now, here's the thing.
We're not going to be looking at the contents of start.sh
because it can spoil the investigation.
Nice!
So it looks like our demo environment was successfully instantiated.
So here's the mission.
You're on the Blue Team of Globomantics Incorporated.
Globomantics would like you to ascertain the
security of their Kubernetes cluster, and also,
as just a little bit of some background information,
Globomantics stated that all of their servers have been recently patched.
Okay, cool!
Good information.
Let's proceed with our investigation.