[ { "timestamp": "2026-10-12T20:27:02.752Z", "category": "Environment", "testName": "Container Identity", "status": "INFO", "details": "root\nuid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),11(floppy),20(dialout),26(tape),27(video)\nclient-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw" }, { "timestamp": "2026-10-12T20:27:02.893Z", "category": "Environment", "testName": "Network Interfaces", "status": "INFO", "details": "1: lo: mtu 65536 qdisc noqueue state UNKNOWN qlen 1000\n link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00\n inet 127.0.0.1/8 scope host lo\n valid_lft forever preferred_lft forever\n inet6 ::1/128 scope host \n valid_lft forever preferred_lft forever\n2: eth0@if43491: mtu 1250 qdisc noqueue state UP qlen 1000\n link/ether a6:44:41:9e:20:3b brd ff:ff:ff:ff:ff:ff\n inet 10.42.5.98/24 brd 10.42.5.255 scope global eth0\n valid_lft forever preferred_lft forever" }, { "timestamp": "2026-10-12T20:27:03.028Z", "category": "Environment", "testName": "Routing Table", "status": "INFO", "details": "default via 10.42.5.1 dev eth0 \n10.42.0.0/16 via 10.42.5.1 dev eth0 \n10.42.5.0/24 dev eth0 scope link src 10.42.5.98" }, { "timestamp": "2026-10-12T20:27:03.192Z", "category": "Environment", "testName": "DNS Configuration", "status": "INFO", "details": "search d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local svc.cluster.local cluster.local cs221.mtl2.ca.leaseweb.net\nnameserver 10.43.0.10\noptions ndots:5" }, { "timestamp": "2026-10-12T20:27:03.430Z", "category": "Internal DNS", "testName": "Short Hostname Resolution (test-redis)", "status": "FAIL", "details": { "command": "nslookup test-redis", "output": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find test-redis.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find test-redis.svc.cluster.local: NXDOMAIN\n\n** server can't find test-redis.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find test-redis.svc.cluster.local: NXDOMAIN\n\n** server can't find test-redis.cluster.local: NXDOMAIN\n\n** server can't find test-redis.cluster.local: NXDOMAIN\n\n** server can't find test-redis.cs221.mtl2.ca.leaseweb.net: NXDOMAIN\n\n** server can't find test-redis.cs221.mtl2.ca.leaseweb.net: NXDOMAIN", "exitCode": 1 } }, { "timestamp": "2026-10-12T20:27:03.869Z", "category": "Internal DNS", "testName": "Resolver Lookup (test-redis)", "status": "FAIL", "details": "ping: bad address 'test-redis'" }, { "timestamp": "2026-10-12T20:27:04.086Z", "category": "Internal DNS", "testName": "Kubernetes FQDN Resolution", "status": "FAIL", "details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find test-redis.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find test-redis.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN" }, { "timestamp": "2026-10-12T20:27:04.261Z", "category": "Internal DNS Pattern Check", "testName": "test-redis.mesh", "status": "NXDOMAIN", "details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find test-redis.mesh: NXDOMAIN\n\n** server can't find test-redis.mesh: NXDOMAIN" }, { "timestamp": "2026-10-12T20:27:04.422Z", "category": "Internal DNS Pattern Check", "testName": "test-redis.dns-tcp-test.mesh", "status": "NXDOMAIN", "details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find test-redis.dns-tcp-test.mesh: NXDOMAIN\n\n** server can't find test-redis.dns-tcp-test.mesh: NXDOMAIN" }, { "timestamp": "2026-10-12T20:27:04.565Z", "category": "Internal DNS Pattern Check", "testName": "test-redis.local", "status": "NXDOMAIN", "details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find test-redis.local: NXDOMAIN\n\n** server can't find test-redis.local: NXDOMAIN" }, { "timestamp": "2026-10-12T20:27:04.797Z", "category": "Internal DNS Pattern Check", "testName": "test-redis.internal", "status": "NXDOMAIN", "details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find test-redis.internal: NXDOMAIN\n\n** server can't find test-redis.internal: NXDOMAIN" }, { "timestamp": "2026-10-12T20:27:04.974Z", "category": "TCP Connectivity", "testName": "TCP Port 6379 Probe via DNS Hostname", "status": "FAIL", "details": { "command": "nc -z -w 3 test-redis 6379", "output": "nc: bad address 'test-redis'", "exitCode": 1 } }, { "timestamp": "2026-10-12T20:27:05.192Z", "category": "TCP Protocol", "testName": "Redis Raw TCP PING/PONG", "status": "FAIL", "details": { "command": "printf \"*1\\r\\n\\$4\\r\\nPING\\r\\n\" | nc -w 3 test-redis 6379", "output": "nc: bad address 'test-redis'", "exitCode": 1 } }, { "timestamp": "2026-10-12T20:27:15.200Z", "category": "TCP Data Integrity", "testName": "Redis State Storage & Retrieval via Raw TCP", "status": "PASS", "details": { "output": "client-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~# \r\n\rclient-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~# printf \"*3\\r\\n\\$3\\r\\nSET\\r\\n\\$12\\r\\nghaymah_test\\r\\n\\$11\\r\\nOK_TCP_PASS\\r\\n\" | nc -w 3 test-redis 6379\r\n\rnc: bad address 'test-redis'\r\nclient-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~# printf \"*2\\r\\n\\$3\\r\\nGET\\r\\n\\$12\\r\\nghaymah_test\\r\\n\" | nc -w 3 test-redis 6379\r\n\rnc: bad address 'test-redis'\r\nclient-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~# ; echo __RET__$?_ma3g0t__END__\r\n\rbash: syntax error near unexpected token `;'\r\nclient-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~#", "exitCode": -1 } }, { "timestamp": "2026-10-12T20:27:15.438Z", "category": "Isolation", "testName": "Cross-Project DNS: auth-deploy", "status": "BLOCKED (SECURE)", "details": { "target": "auth-deploy", "output": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find auth-deploy.svc.cluster.local: NXDOMAIN\n\n** server can't find auth-deploy.cluster.local: NXDOMAIN\n\n** server can't find auth-deploy.svc.cluster.local: NXDOMAIN\n\n** server can't find auth-deploy.cluster.local: NXDOMAIN\n\n** server can't find auth-deploy.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find auth-deploy.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find auth-deploy.cs221.mtl2.ca.leaseweb.net: NXDOMAIN\n\n** server can't find auth-deploy.cs221.mtl2.ca.leaseweb.net: NXDOMAIN", "exitCode": 1 } }, { "timestamp": "2026-10-12T20:27:15.686Z", "category": "Isolation", "testName": "Cross-Project DNS: auth-deploy.mesh", "status": "BLOCKED (SECURE)", "details": { "target": "auth-deploy.mesh", "output": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find auth-deploy.mesh: NXDOMAIN\n\n** server can't find auth-deploy.mesh: NXDOMAIN", "exitCode": 1 } }, { "timestamp": "2026-10-12T20:27:15.822Z", "category": "Isolation", "testName": "Cross-Project DNS: auth-deploy.local", "status": "BLOCKED (SECURE)", "details": { "target": "auth-deploy.local", "output": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find auth-deploy.local: NXDOMAIN\n\n** server can't find auth-deploy.local: NXDOMAIN", "exitCode": 1 } }, { "timestamp": "2026-10-12T20:27:16.062Z", "category": "Isolation", "testName": "Cross-Project DNS: scanner-clean", "status": "BLOCKED (SECURE)", "details": { "target": "scanner-clean", "output": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find scanner-clean.svc.cluster.local: NXDOMAIN\n\n** server can't find scanner-clean.cluster.local: NXDOMAIN\n\n** server can't find scanner-clean.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find scanner-clean.cluster.local: NXDOMAIN\n\n** server can't find scanner-clean.svc.cluster.local: NXDOMAIN\n\n** server can't find scanner-clean.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find scanner-clean.cs221.mtl2.ca.leaseweb.net: NXDOMAIN\n\n** server can't find scanner-clean.cs221.mtl2.ca.leaseweb.net: NXDOMAIN", "exitCode": 1 } }, { "timestamp": "2026-10-12T20:27:16.203Z", "category": "Isolation", "testName": "Cross-Project DNS: scanner-clean.mesh", "status": "BLOCKED (SECURE)", "details": { "target": "scanner-clean.mesh", "output": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find scanner-clean.mesh: NXDOMAIN\n\n** server can't find scanner-clean.mesh: NXDOMAIN", "exitCode": 1 } }, { "timestamp": "2026-10-12T20:27:16.340Z", "category": "Tenant Isolation", "testName": "Cross-Tenant DNS: kubernetes.default.svc", "status": "BLOCKED", "details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find kubernetes.default.svc: NXDOMAIN\n\n** server can't find kubernetes.default.svc: NXDOMAIN" }, { "timestamp": "2026-10-12T20:27:16.490Z", "category": "Tenant Isolation", "testName": "Cross-Tenant DNS: metadata.google.internal", "status": "BLOCKED", "details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find metadata.google.internal: NXDOMAIN\n\n** server can't find metadata.google.internal: NXDOMAIN" }, { "timestamp": "2026-10-12T20:27:16.676Z", "category": "Tenant Isolation", "testName": "Cross-Tenant DNS: admin-panel", "status": "BLOCKED", "details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find admin-panel.cluster.local: NXDOMAIN\n\n** server can't find admin-panel.svc.cluster.local: NXDOMAIN\n\n** server can't find admin-panel.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find admin-panel.svc.cluster.local: NXDOMAIN\n\n** server can't find admin-panel.cluster.local: NXDOMAIN\n\n** server can't find admin-panel.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find admin-panel.cs221.mtl2.ca.leaseweb.net: NXDOMAIN\n\n** server can't find admin-panel.cs221.mtl2.ca.leaseweb.net: NXDOMAIN" }, { "timestamp": "2026-10-12T20:27:16.817Z", "category": "Tenant Isolation", "testName": "Cross-Tenant DNS: backend.internal", "status": "BLOCKED", "details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find backend.internal: NXDOMAIN\n\n** server can't find backend.internal: NXDOMAIN" }, { "timestamp": "2026-10-12T20:27:16.960Z", "category": "Tenant Isolation", "testName": "Cross-Tenant DNS: database.default", "status": "BLOCKED", "details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find database.default: NXDOMAIN\n\n** server can't find database.default: NXDOMAIN" }, { "timestamp": "2026-10-12T20:27:26.975Z", "category": "Network Isolation", "testName": "Direct IP Probing: 10.43.0.1", "status": "BLOCKED", "details": { "ip": "10.43.0.1", "exitCode": -1 } }, { "timestamp": "2026-10-12T20:27:36.987Z", "category": "Network Isolation", "testName": "Direct IP Probing: 10.43.0.10", "status": "BLOCKED", "details": { "ip": "10.43.0.10", "exitCode": -1 } }, { "timestamp": "2026-10-12T20:27:47.011Z", "category": "Network Isolation", "testName": "Direct IP Probing: 10.42.5.1", "status": "BLOCKED", "details": { "ip": "10.42.5.1", "exitCode": -1 } }, { "timestamp": "2026-10-12T20:27:57.025Z", "category": "Network Isolation", "testName": "Direct IP Probing: 10.100.0.1", "status": "BLOCKED", "details": { "ip": "10.100.0.1", "exitCode": -1 } }, { "timestamp": "2026-10-12T20:28:07.031Z", "category": "Network Isolation", "testName": "Direct IP Probing: 10.100.0.2", "status": "BLOCKED", "details": { "ip": "10.100.0.2", "exitCode": -1 } }, { "timestamp": "2026-10-12T20:28:17.038Z", "category": "Network Isolation", "testName": "Direct IP Probing: 172.17.0.1", "status": "BLOCKED", "details": { "ip": "172.17.0.1", "exitCode": -1 } }, { "timestamp": "2026-10-12T20:28:27.053Z", "category": "Network Isolation", "testName": "Direct IP Probing: 169.254.169.254", "status": "BLOCKED", "details": { "ip": "169.254.169.254", "exitCode": -1 } }, { "timestamp": "2026-10-12T20:28:37.063Z", "category": "Network Enumeration", "testName": "Port Scan test-redis", "status": "COMPLETED", "details": "client-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~# for p in 22 53 80 443 3000 4000 5432 6379 8080 9000; do\r\n\r> nc -z -w 1 test-redis $p && echo \"PORT $p OPEN\" || echo \"PORT $p CLOSED\"\r\n\r> done\r\n\rnc: bad address 'test-redis'\r\nPORT 22 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 53 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 80 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 443 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 3000 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 4000 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 5432 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 6379 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 8080 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 9000 CLOSED\r\nclient-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~# ; echo __RET__$?_iwjsdj__END__\r\n\rbash: syntax error near unexpected token `;'\r\nclient-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~#" }, { "timestamp": "2026-10-12T20:28:38.002Z", "category": "Dual Routing", "testName": "Outbound Internet Access (Egress)", "status": "PASS", "details": "{\n \"origin\": \"184.107.141.203\"\n}" }, { "timestamp": "2026-10-12T20:28:38.269Z", "category": "DNS Routing", "testName": "External DNS Resolution (google.com)", "status": "PASS", "details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\nNon-authoritative answer:\nName:\tgoogle.com\nAddress: 2607:f8b0:4020:c07::66\nName:\tgoogle.com\nAddress: 2607:f8b0:4020:c07::64\nName:\tgoogle.com\nAddress: 2607:f8b0:4020:c07::71\nName:\tgoogle.com\nAddress: 2607:f8b0:4020:c07::8b\n\nNon-authoritative answer:\nName:\tgoogle.com\nAddress: 64.233.178.138\nName:\tgoogle.com\nAddress: 64.233.178.101\nName:\tgoogle.com\nAddress: 64.233.178.139\nName:\tgoogle.com\nAddress: 64.233.178.113\nName:\tgoogle.com\nAddress: 64.233.178.102\nName:\tgoogle.com\nAddress: 64.233.178.100" }, { "timestamp": "2026-10-12T20:28:38.432Z", "category": "DNS Routing", "testName": "External DNS Resolution (github.com)", "status": "PASS", "details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n\nName:\tgithub.com\nAddress: 140.82.112.3" }, { "timestamp": "2026-10-12T20:28:38.594Z", "category": "DNS Routing", "testName": "External DNS Resolution (cloudflare.com)", "status": "PASS", "details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\nNon-authoritative answer:\nName:\tcloudflare.com\nAddress: 104.16.133.229\nName:\tcloudflare.com\nAddress: 104.16.132.229\n\nNon-authoritative answer:\nName:\tcloudflare.com\nAddress: 2606:4700::6810:84e5\nName:\tcloudflare.com\nAddress: 2606:4700::6810:85e5" }, { "timestamp": "2026-10-12T20:28:38.769Z", "category": "DNS Leak Detection", "testName": "Non-existent Mesh Domain Query", "status": "SECURE (NXDOMAIN)", "details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find leak-test-nonexistent-internal-ghaymah.mesh: NXDOMAIN\n\n** server can't find leak-test-nonexistent-internal-ghaymah.mesh: NXDOMAIN" } ]