hard20 pts · first answer countsdevsecopskubernetesrbac

Pod create rights reveal Secrets

A developer has no get or list rights on Secrets in namespace payments, but can create Pods there. Why can they still read the payments DB password Secret?

A.They can make a Pod that mounts the Secret and prints itB.Pods inherit cluster-admin rights by defaultC.Secrets are shown in kubectl get pods outputD.The scheduler sends Secret values to the Pod creator

Discussion 0

Join free to post in the discussion.

Pod create rights reveal Secrets

Discussion 0

Related questions