argo-events

Description

A Helm chart for Argo Events, the event-driven workflow automation framework

• https://github.com/argoproj/argo-events

Overview

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.

Identities

🤖 argo-events-controller-manager

Namespace: default  |  Automount: ✅

🔑 Permissions (19)

⚠️ Potential Abuse (21)

The following security risks were found based on the above permissions:

• Cluster-wide pod exec
• Namespaced pod exec
• Create pods cluster-wide
• Create pods in a namespace
• Update/Patch pods cluster-wide
• Update/Patch pods in a namespace
• Modify secrets cluster-wide
• Modify secrets in a namespace
• Read ConfigMaps cluster-wide
• Read ConfigMaps in a namespace
• Modify ConfigMaps cluster-wide
• Modify ConfigMaps in a namespace
• Manage Deployments cluster-wide (potential for privileged pod execution)
• Manage Deployments in a namespace (potential for privileged pod execution)
• Manage StatefulSets cluster-wide
• Manage StatefulSets in a namespace
• Manage Services cluster-wide
• Manage Services in a namespace
• Manage Leases cluster-wide
• Manage Leases in kube-system or kube-node-lease namespace

📦 Workloads (1)

🤖 argo-events-events-webhook

Namespace: default  |  Automount: ✅

🔑 Permissions (0)

No explicit RBAC bindings.

📦 Workloads (0)

No workloads use this ServiceAccount.