admin
8257ff1cbe
gates / gates (push) Successful in 12m37s
Read-only audit of whether the hacked Plex pod on DooPlex (HM-040, 2026-10-17 -> 10-23) reached Felhom's secrets. Two no-login doors existed (the Longhorn NFS export and the Longhorn API); neither was used: nfsd accepted 0 new connections in the window (positive control), no off-schedule Longhorn backup or volume. Evidence in documentation/audits/plex2shell-felhom-impact-2026-10-23/. The NFS export was narrowed from * to 10.42.0.0/16 on the operator's yes (host change, not in git). 13-threat-model.md: attacker j and one boundary row. STATUS: verdict, the P1, one do item.
46 lines
1.7 KiB
Plaintext
46 lines
1.7 KiB
Plaintext
# P3.5 container network bytes (cAdvisor), window 2026-10-17T04:00Z..10-23T08:05Z, 2026-10-23T15:30:10Z
|
|
== transmit bytes per day, Plex pod (GiB)
|
|
2026-10-11T00:00:00Z 0.04
|
|
2026-10-12T00:00:00Z 0.04
|
|
2026-10-13T00:00:00Z 0.04
|
|
2026-10-14T00:00:00Z 0.04
|
|
2026-10-15T00:00:00Z 0.26
|
|
2026-10-16T00:00:00Z 0.08
|
|
2026-10-17T00:00:00Z 2.25
|
|
2026-10-18T00:00:00Z 142.97
|
|
2026-10-19T00:00:00Z 202.37
|
|
2026-10-20T00:00:00Z 528.45
|
|
2026-10-21T00:00:00Z 441.46
|
|
2026-10-22T00:00:00Z 206.1
|
|
2026-10-23T00:00:00Z 0.09
|
|
== receive bytes per day, Plex pod (GiB)
|
|
2026-10-11T00:00:00Z 0.01
|
|
2026-10-12T00:00:00Z 0.01
|
|
2026-10-13T00:00:00Z 0.01
|
|
2026-10-14T00:00:00Z 0.01
|
|
2026-10-15T00:00:00Z 0.03
|
|
2026-10-16T00:00:00Z 0.02
|
|
2026-10-17T00:00:00Z 0.03
|
|
2026-10-18T00:00:00Z 2.25
|
|
2026-10-19T00:00:00Z 7.87
|
|
2026-10-20T00:00:00Z 1.03
|
|
2026-10-21T00:00:00Z 0.04
|
|
2026-10-22T00:00:00Z 1.05
|
|
2026-10-23T00:00:00Z 0.02
|
|
== labels available on the metric (does any give the PEER?)
|
|
["__name__","beta_kubernetes_io_arch","beta_kubernetes_io_instance_type","beta_kubernetes_io_os","id","image","instance","interface","job","kubernetes_io_arch","kubernetes_io_hostname","kubernetes_io_os","name","namespace","node_kubernetes_io_instance_type","node_role_kubernetes_io_control_plane","node_role_kubernetes_io_master","pod"]
|
|
== longhorn-system pods: transmit bytes per day (GiB) — an off-site backup would show here
|
|
2026-10-11T00:00:00Z 25.56
|
|
2026-10-12T00:00:00Z 22.86
|
|
2026-10-13T00:00:00Z 25.3
|
|
2026-10-14T00:00:00Z 26.44
|
|
2026-10-15T00:00:00Z 29.03
|
|
2026-10-16T00:00:00Z 44.67
|
|
2026-10-17T00:00:00Z 45.61
|
|
2026-10-18T00:00:00Z 36.08
|
|
2026-10-19T00:00:00Z 66.68
|
|
2026-10-20T00:00:00Z 76.98
|
|
2026-10-21T00:00:00Z 39.77
|
|
2026-10-22T00:00:00Z 35.41
|
|
2026-10-23T00:00:00Z 38.63
|