Muhammad Yuga Nugraha

Muhammad Yuga Nugraha (usually called Yuga) is a DevOps Engineer with over 7 years of experience and a passion for infrastructure security, particularly in Cloud and Cloud Native technologies. He built kubernetes-security.cloud to spread awareness of security across Kubernetes environments and has spoken at events such as PyCon APAC 2024, PyCon SG 2025, AWS Community Day Indonesia 2024 & 2025, OpenInfra ID 2025, KCD Indonesia 2024, and Cloud Village @ DEF CON 33

Hack the Cluster: Breaking Kubernetes as an Adversary Would

As organizations increasingly adopt microservices, Kubernetes has become the de facto standard for container orchestration but with that adoption comes a growing and often underestimated attack surface. Security engineers face a steep learning curve navigating this complex environment, sometimes spending months just getting familiar with the technology before they can assess its risks.

This hands-on workshop bridges that gap. Starting from the fundamentals of Kubernetes, we’ll quickly move into what matters most from a security perspective: how attackers think, what defenders must cover, and where most teams go wrong. Through real-world scenarios, participants will explore common Tactics, Techniques, and Procedures (TTPs) in Kubernetes environments and walk away with the practical skills to start securing their cloud native infrastructure.