Kubernetes LAN Party

My score: 0 pts.

Train Your Team About Leaderboard Register

choose your challenge:

The Beauty and The Ist

Apparently, new service mesh technologies hold unique appeal for ultra-elite users (root users). Don't abuse this power; use it responsibly and with caution.

Challenge value: 10 pts.

View Policy

Found an issue? Email us at research@wiz.io

With ❤️ by @nirohfeld & @shirtamari from Wiz

K8s Cheat Sheet

Get Pods: kubectl get pods
Get Secrets: kubectl get secrets
Describe Pod: kubectl describe pod <pod_name>
Login To Registry crane auth
Export filesystem of a container crane export
Get the config of an image crane config
Get Service Account kubectl get serviceaccount
Create service account token: kubectl create token [service_account]
Get AWS Identity: aws sts get-caller-identity

apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: istio-get-flag
  namespace: k8s-lan-party
spec:
  action: DENY
  selector:
    matchLabels:
      app: "{flag-pod-name}"
  rules:
  - from:
    - source:
        namespaces: ["k8s-lan-party"]
    to:
    - operation:
        methods: ["POST", "GET"]

null

null

choose your challenge:

The Beauty and The Ist

Hint #1

Reveal Hint?

Solve one more challenge and get a certificate!

Found an issue? Email us at research@wiz.io

With ❤️ by @nirohfeld & @shirtamari from Wiz

K8s Cheat Sheet