dynatrace-operator

Description

The Dynatrace Operator Helm chart for Kubernetes and OpenShift

• https://github.com/Dynatrace/helm-charts

Overview

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.

Identities

🤖 dynatrace-kubernetes-monitoring

Namespace: default  |  Automount: ❌

🔑 Permissions (85)

⚠️ Potential Abuse (6)

The following security risks were found based on the above permissions:

• Read events cluster-wide
• List Namespaces (Cluster Reconnaissance)
• Read ResourceQuotas (Namespace Information Disclosure)
• Read All ResourceQuotas (Cluster-wide Information Disclosure)
• Node proxy GET RCE via WebSocket

📦 Workloads (0)

No workloads use this ServiceAccount.

🤖 dynatrace-operator

Namespace: default  |  Automount: ❌

🔑 Permissions (4)

⚠️ Potential Abuse (2)

The following security risks were found based on the above permissions:

• List Namespaces (Cluster Reconnaissance)

📦 Workloads (1)

🤖 dynatrace-dynakube-oneagent

Namespace: default  |  Automount: ❌

🔑 Permissions (0)

No explicit RBAC bindings.

📦 Workloads (0)

No workloads use this ServiceAccount.

🤖 dynatrace-dynakube-oneagent-unprivileged

Namespace: default  |  Automount: ❌

🔑 Permissions (0)

No explicit RBAC bindings.

📦 Workloads (0)

No workloads use this ServiceAccount.

🤖 dynatrace-routing

Namespace: default  |  Automount: ❌

🔑 Permissions (0)

No explicit RBAC bindings.

📦 Workloads (0)

No workloads use this ServiceAccount.