Almost all agents in production are protected by a static API key as an Environment variable. Here in this workshop, we will achieve security by a vulnerable demo with MCP server.
Adding OAuth 2.1 with Keycloak as the IdP, along with blocking destructive tools via Kyverno policies and lock down pod to pod traffic with Kubernetes Network Policies.
To demonstrate, we will have a live attack and defend round, making this a quite interesting workshop where attendees attempt prompt-injection and credential exfiltration against each other clusters to see what each control catches.