kubernetes-privesc-review

@funiantongxue

Use when testing Kubernetes privilege-escalation paths in an authorized environment, especially Pod or node starting points that may lead to broader cluster control. Covers service account overreach, DaemonSet and node-agent RBAC risk, kubelet and control-plane exposure, dashboard or etcd misconfiguration, kubectl proxy exposure, and safe validation of node-to-cluster pivot opportunities. 适用于 K8s 提权审计、ServiceAccount 权限过大排查、节点到集群管理面的横向与控制面暴露检查。