etcd attacks TL;DR: Direct etcd reach = full cluster state. TLS cert hygiene as the only gate. Stub — to be filled in. What it is TODO Preconditions / where it applies TODO Technique TODO Detection and defence TODO References TODO