Pod Name Similarity
While fairly simple, just naming a pod something that doesn't stand out is a great way to hide among "known good" pods.
In this example, a secondary etcd
pod was created that is actually just an Ubuntu image.
apiVersion: v1
kind: Pod
metadata:
name: etcd
namespace: kube-system
spec:
containers:
- name: ubuntu
image: ubuntu:latest
command: ["sh","-c","sleep 100000000000000"]
Defending
Pull requests needed ❤️