Kube Audit

Review a set of Kubernetes manifests and an RBAC dump, and find the configurations that would let one compromised pod take over the cluster.

Scenario

Larkspur Logistics is about to move its shop platform onto Kubernetes, and the platform team wants a fresh pair of eyes before go-live. They handed over every workload manifest from the cluster plus a single file with all the RBAC bindings dumped into it.

There is no cluster to poke at, and that is the point: this is a paper review. Read the manifests the way an auditor would and call out each workload or binding that breaks basic Kubernetes hardening.