Expected Findings
- Dashboard `--enable-skip-login` is set.
- `anonymous-auth=true` on the kube-apiserver.
- `view` ClusterRole is bound to `system:anonymous`.
Kubernetes
Open Kubernetes Dashboard
The Kubernetes dashboard is reachable over the public internet with anonymous access, so namespaces, pods, and secrets are listable without auth.
CWE-306CWE-200
Cluster probe
Primary Flows
- Namespaces Anonymous list
- Secrets Cluster secrets
- Pods (kube-system) Control plane visible
Signals
Flag
--enable-skip-login --anonymous-auth=true