1 Service Accounts
1 Workloads
33 Bindings
1 Critical
32 Low
Description
A Helm chart for KubeRocketCI Codebase Operator
Overview
| Identity | Namespace | Automount | Secrets | Permissions | Workloads | Risk |
|---|---|---|---|---|---|---|
edp-codebase-operator | default | — | 33 | 1 | Critical |
Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.
Identities
edp-codebase-operator
Namespace: default | Automount:
Permissions (33)
| Role | Resource | Verbs | Risk | Tags |
|---|---|---|---|---|
Role edp-codebase-operator | core/secrets | delete · get · list · update · watch | Critical | CredentialAccess DataExposure InformationDisclosure SecretAccess |
Role edp-codebase-operator | v2.edp.epam.com/cdpipelines | get · list | Low | |
Role edp-codebase-operator | v2.edp.epam.com/cdstagedeployments | create · delete · get · list · patch · update · watch | Low | |
Role edp-codebase-operator | v2.edp.epam.com/cdstagedeployments/finalizers | update | Low | |
Role edp-codebase-operator | v2.edp.epam.com/cdstagedeployments/status | get · patch · update | Low | |
Role edp-codebase-operator | v2.edp.epam.com/codebasebranches | create · delete · get · list · patch · update · watch | Low | |
Role edp-codebase-operator | v2.edp.epam.com/codebasebranches/finalizers | update | Low | |
Role edp-codebase-operator | v2.edp.epam.com/codebasebranches/status | get · patch · update | Low | |
Role edp-codebase-operator | v2.edp.epam.com/codebaseimagestreams | create · delete · get · list · patch · update · watch | Low | |
Role edp-codebase-operator | v2.edp.epam.com/codebaseimagestreams/finalizers | update | Low | |
Role edp-codebase-operator | v2.edp.epam.com/codebaseimagestreams/status | get · patch · update | Low | |
Role edp-codebase-operator | v2.edp.epam.com/codebases | create · delete · get · list · patch · update · watch | Low | |
Role edp-codebase-operator | v2.edp.epam.com/codebases/finalizers | update | Low | |
Role edp-codebase-operator | v2.edp.epam.com/codebases/status | get · patch · update | Low | |
Role edp-codebase-operator | core/configmaps | get | Low | |
Role edp-codebase-operator | triggers.tekton.dev/eventlisteners | create · get · patch | Low | |
Role edp-codebase-operator | core/events | create · patch | Low | |
Role edp-codebase-operator | v2.edp.epam.com/gitservers | create · delete · get · list · patch · update · watch | Low | |
Role edp-codebase-operator | v2.edp.epam.com/gitservers/finalizers | update | Low | |
Role edp-codebase-operator | v2.edp.epam.com/gitservers/status | get · patch · update | Low | |
Role edp-codebase-operator | gateway.networking.k8s.io/httproutes | create · get | Low | |
Role edp-codebase-operator | networking.k8s.io/ingresses | create · get | Low | |
Role edp-codebase-operator | v2.edp.epam.com/jiraissuemetadatas | create · delete · get · list · patch · update · watch | Low | |
Role edp-codebase-operator | v2.edp.epam.com/jiraissuemetadatas/finalizers | update | Low | |
Role edp-codebase-operator | v2.edp.epam.com/jiraissuemetadatas/status | get · patch · update | Low | |
Role edp-codebase-operator | v2.edp.epam.com/jiraservers | create · delete · get · list · patch · update · watch | Low | |
Role edp-codebase-operator | v2.edp.epam.com/jiraservers/finalizers | update | Low | |
Role edp-codebase-operator | v2.edp.epam.com/jiraservers/status | get · patch · update | Low | |
Role edp-codebase-operator | coordination.k8s.io/leases | create · get · update | Low | |
Role edp-codebase-operator | tekton.dev/pipelineruns | create · list · watch | Low | |
Role edp-codebase-operator | v2.edp.epam.com/quicklinks | get | Low | |
Role edp-codebase-operator | v2.edp.epam.com/stages | get · list | Low | |
Role edp-codebase-operator | triggers.tekton.dev/triggertemplates | get | Low |
Potential Abuse (2)
The following security risks were found based on the above permissions:
Workloads (1)
| Kind | Name | Container | Image |
|---|---|---|---|
| Deployment | codebase-operator | codebase-operator | epamedp/codebase-operator:2.37.0-SNAPSHOT.6 |