Kube Confessions

Challenge Question

During an incident at a company running Kubernetes, you have been given the cluster's RBAC dump and a stolen kubeconfig. Roles, bindings and service accounts combine in ways that are easy to get wrong. Work through the permissions, trace which service account can reach secrets it should never be able to read, and use that access to recover the flag.