rbac-police audits kubernetes pods for container escape routes

This isn't my tool, but I watched the talk on it from blackhat US this year (it's on YouTube).

It's quite interesting. It looks at the cluster roles in kubernetes and then let's you know which pods you can "escape" from and takeover the kubernetes cluster.

I ran it this week against 2 nginx ingress deployments. One was deployed from the nginx helm chart, the other from the kubernetes nginx helm chart. The official one has two ways of taking …

audits container container escape cybersecurity escape kubernetes pods police rbac