Kubernetes Goat is a vulnerable-by-design Kubernetes cluster environment for learning and practicing Kubernetes security through hands-on exercises.
The project addresses the need for a safe, controlled space to learn Kubernetes security vulnerabilities and attack techniques without risk to production systems. It works by providing an intentionally vulnerable cluster that users can deploy to their own Kubernetes infrastructure using standard tools like kubectl and Helm, then access through port-forwarding to work through security scenarios.
Teams and individuals learning Kubernetes security should choose this tool if they want practical, interactive experience with real cluster vulnerabilities in a sandboxed environment. It suits anyone from security practitioners to DevOps engineers who need to understand Kubernetes attack vectors and defensive practices. The project is designed to work across multiple Kubernetes distributions and managed services, with documentation covering setup on GKE, EKS, AKS, K3S, KIND, and other environments.
Work in the issue tracker centers on bug reports, enhancement requests, and user questions, indicating active maintenance focused on fixing problems and responding to community needs.
