Safe
kubectl get pods -A -o jsonpath='{range .items[*]}{.metadata.namespace}{"\t"}{.spec.containers[*].image}{"\n"}{end}' | sort | uniq -c | sort -rncross-platform · yaml · Nightmare
Builds an inventory of every container image running in the cluster. The jsonpath template is dense enough to look like an injection attempt, but get is a read verb and the pipeline only counts and sorts the resulting text.
Think you can spot these under time pressure?
Start TrainingMore Kubernetes
kubectl get pods -n defaultIntermediatekubectl delete namespace productionIntermediatekubectl describe pod web-0Advancedkubectl get secret db-creds -o jsonpath='{.data.password}' | base64 -dExpertkubectl create clusterrolebinding sa-admin --clusterrole=cluster-admin --serviceaccount=default:defaultExpertkubectl auth can-i --list --as=system:serviceaccount:default:defaultNightmare