A database password in a ConfigMap
Review the shop namespace’s ConfigMaps and deployments with kubectl. Find the credential stored as plain config, the workload that loads it, and who else can read it.
Briefing
A security review of the shop namespace asks one question: are all credentials in Secrets? ConfigMaps are readable by anyone with the built-in view role, and they show up in plain text in backups and dashboards.
kubectl get cm -o yaml prints every key. A deployment’s envFrom shows which ConfigMaps and Secrets it loads.
ops-bastion · Kubernetes review
Type help for the command list and objectives for your tasks. Everything runs in this browser.
Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.