Save the bell, save the world.
In order of who completed the challenge:
The cluster is a vanilla instance of kind (v0.7.0) with some very strict RBAC rules and Pod Security Policies configured for several accounts and namespaces. You start as the "goose" in the "garden" namespace and must enumerate your environment and discover the challenge itself. It does NOT require exploiting the host in any way. It is 100% achievable through Kubernetes.
To replicate the setup execute the following from this directory:
kind create cluster --config=kind-config.yaml --name honkctl
kubectl apply -f manifests/01
kubectl apply -f manifests/02
kubectl apply -f manifests/03
./goose.sh
The solution and greater explanation can be found in solution.md.
Trying not to spoil the fun if folks want to give it a go :)