Kubernetes Enumeration

TOOL: Kubectl

1) Check if your current account has privileges to create pods to any namespaces

kubectl auth can-i create pods --all-namespaces 

2) Check what your current user can do within the cluster

kubectl auth can-i --list 

3) Enumerate namespaces (use -n NAMESPACE flag after typing this command to check more details about the specific namespace)

kubectl get namespaces 

4) Check the pods in a specified namespace

kubectl get pods -n NAMESPACE 

5) Check details about a specific pod in a specific namespace

kubectl describe pod POD -n NAMESPACE 

TIP: kube-system namespace has the top privileges inside the cluster, so if in any way we can interact with it, it's a good sign we can compromise the entire cluster