Tagged kubernetes

Assess cloud, container and Kubernetes setups for metadata SSRF and RBAC gaps

Trace Kubernetes RBAC, service account and admission paths in CTF labs

Set up GitOps with ArgoCD or Flux for automated Kubernetes deployments

Scaffold and template Helm charts for packaging Kubernetes applications

Generate Kubernetes YAML manifests for deployments, services and secrets

Lock down Kubernetes with NetworkPolicy, pod security standards and RBAC

Build Quarkus native executables and container images for Kubernetes or OpenShift

Detect exec-into-pod, secret access and RBAC changes in Kubernetes audit logs

Audit Kubernetes RBAC for wildcard roles, dangerous bindings and service account abuse

Trace Kubernetes RBAC paths that let subjects escalate toward cluster-admin

Run kube-bench to check a Kubernetes cluster against CIS benchmark controls

Deploy Falco with the eBPF driver in Kubernetes and Docker to catch runtime threats

Block root and privileged Kubernetes pods with OPA admission rules and Falco alerts

Sign container images with Cosign and enforce signature checks at Kubernetes admission

Scan Terraform, CloudFormation, Kubernetes and Helm with Checkov, tfsec and KICS

Install Calico as the CNI and write default-deny Kubernetes network policies

Map Kubernetes workloads to Privileged, Baseline or Restricted pod security profiles

Write portable Kubernetes NetworkPolicies with default-deny rules for any conformant CNI

Enforce policy at Kubernetes admission with OPA Gatekeeper and Rego constraints

Write Rego policies and test them in OPA for Kubernetes and CI/CD pipeline checks

Shrink Kubernetes RBAC to least-privilege roles and remove cluster-admin sprawl

Block dangerous syscalls in Kubernetes with eBPF-based Tetragon enforcement

Turn kube-bench results into a CIS Kubernetes audit with remediation and evidence

Check etcd encryption at rest, TLS, access control and backups in Kubernetes

Test Kubernetes clusters for paths to compromise with kube-hunter and peirates

Scan Terraform, Kubernetes manifests and images with Trivy before deployment

Score Kubernetes manifests with Kubesec to flag privilege risks before deploy

Verify Helm chart signatures, lint templates and move secrets out of values files

Harden EKS, AKS and GKE with pod security standards, network policies and RBAC

Work across AWS, Azure, GCP, Kubernetes and Terraform for CI/CD and monitoring

Write Terraform and Kubernetes infrastructure with CI/CD pipelines and observability

Automate Kubernetes deployments with GitOps using ArgoCD and Flux

Plan and configure production Google Kubernetes Engine clusters on Autopilot

Create and manage Helm charts for packaging and deploying Kubernetes apps

Build and harden Helm charts with values design and chart tests

Build Kubernetes operators with CRDs and controller-runtime reconcile loops

Generate secure Kubernetes YAML manifests for GKE Autopilot and Standard

Package Kubernetes apps with Helm charts, templates and dependencies

Operate Kubernetes with kubectl, deployments and pod debugging

Write Dockerfiles, CI/CD pipelines, Kubernetes manifests and Terraform templates

Write Kubernetes manifests, RBAC rules and Helm charts and debug crashing pods

Test Kubernetes clusters for stolen service account tokens and RBAC escalation

Test cloud metadata, IAM privilege escalation and Kubernetes exposure during pentests

Run the cloud exploitation lane across IAM, S3, Kubernetes and metadata

Route container and Kubernetes attack paths from pod escape to build pipelines

Pivot through Kubernetes service accounts, RBAC and kube-apiserver access

Escape Kubernetes pods to the node through hostPath, privileges and capabilities

Escalate Kubernetes RBAC permissions through pods/exec, secrets and impersonation

Route Kubernetes, Helm, GitOps and Terraform questions to the right infra guides