Safe
kubectl get secret db-creds -o jsonpath='{.data.password}' | base64 -dcross-platform · yaml · Expert
Reads one field of a Kubernetes secret you are authorised to read and decodes it for display. It looks like credential theft, but Kubernetes stores secrets base64-encoded by design and decoding is the only way to use the value; the access control question was already answered by RBAC.
Think you can spot these under time pressure?
Start TrainingMore Kubernetes
kubectl get pods -n defaultIntermediatekubectl delete namespace productionIntermediatekubectl describe pod web-0Advancedkubectl create clusterrolebinding sa-admin --clusterrole=cluster-admin --serviceaccount=default:defaultExpertkubectl auth can-i --list --as=system:serviceaccount:default:defaultNightmarekubectl get pods -A -o jsonpath='{range .items[*]}{.metadata.namespace}{"\t"}{.spec.containers[*].image}{"\n"}{end}' | sort | uniq -c | sort -rnNightmare