Kubetier
  1. get or list secrets in an accessible namespace

  2. Extract cloud API keys, DB credentials, TLS keys, or kubeconfigs

  3. Use the credentials to escalate inside or outside the cluster

Rights needed, any one set:

K8s docs ↗