Safe
kubectl get pods -n production -o custom-columns='NAME:.metadata.name,PRIV:.spec.containers[*].securityContext.privileged'cross-platform · bash · Expert
Projects each pod's privileged flag into a column so the whole namespace can be scanned at once. This is the audit that finds the workloads…
The full explanation and danger signals for this pack are part of Pro.
Think you can spot these under time pressure?
Start TrainingMore Kubernetes
kubectl get pods -n defaultIntermediatekubectl delete namespace productionIntermediatekubectl describe pod web-0Advancedkubectl get secret db-creds -o jsonpath='{.data.password}' | base64 -dExpertkubectl create clusterrolebinding sa-admin --clusterrole=cluster-admin --serviceaccount=default:defaultExpertkubectl auth can-i --list --as=system:serviceaccount:default:defaultNightmare