competition-k8s-control-plane

What problem does it solve?

This skill helps security researchers and operators map how Kubernetes API actions translate into workload changes, revealing how permissions and controller logic enable or prevent secret exposure and drift between manifests and live state.

Core Features & Use Cases

• Map the API trust path: capture principal identity, RBAC edges, and admission/mutation steps that lead to a workload or secret.
• Trace mutations to workload state: compare intent vs live objects, trace controller outputs, and identify where drift originates.
• Reduce to decisive path: compress complex chains into the smallest chain from principal to effect, aiding rapid remediation and evidence collection.
• This skill is used when auditing Kubernetes security posture, debugging RBAC issues, or analyzing admission webhook and controller behavior in sandbox environments.

Quick Start

After $ctf-sandbox-orchestrator is active, tell this skill the Kubernetes control-plane path you want traced and let it map RBAC edges to workload effects.