3 Service Accounts
3 Workloads
21 Bindings
20 Medium
1 Low
Description
A Helm chart for EDP Nexus Operator
Overview
| Identity | Namespace | Automount | Secrets | Permissions | Workloads | Risk |
|---|---|---|---|---|---|---|
edp-nexus-operator | default | ❌ | — | 21 | 1 | Medium |
nexus | default | ❌ | — | 0 | 1 | — |
nexus-proxy | default | ❌ | — | 0 | 1 | — |
Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.
Identities
🤖 edp-nexus-operator
Namespace: default | Automount: ❌
🔑 Permissions (21)
| Role | Resource | Verbs | Risk | Tags |
|---|---|---|---|---|
Role edp-nexus-operator | */deployments/finalizers | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */events | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */jenkins | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */jenkins/finalizers | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */jenkins/status | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */jenkinses | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */jenkinses/finalizers | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */jenkinses/status | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */jenkinsscripts | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */jenkinsscripts/finalizers | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */jenkinsscripts/status | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */jenkinsserviceaccounts | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */jenkinsserviceaccounts/finalizers | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */jenkinsserviceaccounts/status | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */nexuses | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */nexuses/finalizers | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */nexuses/status | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */nexususers | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */nexususers/finalizers | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | */nexususers/status | * | Medium | NamespaceAdmin NamespaceWideAccess |
Role edp-nexus-operator | coordination.k8s.io/leases | create · get · list · update | Low |
⚠️ Potential Abuse (2)
The following security risks were found based on the above permissions:
📦 Workloads (1)
| Kind | Name | Container | Image |
|---|---|---|---|
| Deployment | nexus-operator | nexus-operator | epamedp/nexus-operator:2.17.0 |
🤖 nexus
Namespace: default | Automount: ❌
🔑 Permissions (0)
No explicit RBAC bindings.
📦 Workloads (1)
| Kind | Name | Container | Image |
|---|---|---|---|
| Deployment | nexus | nexus | sonatype/nexus3:3.58.1 |
🤖 nexus-proxy
Namespace: default | Automount: ❌
🔑 Permissions (0)
No explicit RBAC bindings.
📦 Workloads (1)
| Kind | Name | Container | Image |
|---|---|---|---|
| Deployment | nexus-proxy | nexus-proxy | quay.io/oauth2-proxy/oauth2-proxy:v7.4.0 |