grafana-operator

Description

Grafana Operator is a Kubernetes operator that enables the installation and management of Grafana instances, dashboards and plugins.

• https://github.com/bitnami/charts/tree/main/bitnami/grafana-operator

Overview

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.

Identities

🤖 grafana-operator

Namespace: default  |  Automount: ❌

🔑 Permissions (44)

⚠️ Potential Abuse (19)

The following security risks were found based on the above permissions:

• Read secrets cluster-wide
• Read secrets in a namespace
• Modify secrets cluster-wide
• Modify secrets in a namespace
• Read ConfigMaps cluster-wide
• Read ConfigMaps in a namespace
• Modify ConfigMaps cluster-wide
• Modify ConfigMaps in a namespace
• Manage Deployments cluster-wide (potential for privileged pod execution)
• Manage Deployments in a namespace (potential for privileged pod execution)
• Manage ServiceAccounts cluster-wide
• Manage ServiceAccounts in a namespace
• Read events cluster-wide
• Manage Services cluster-wide
• Manage Services in a namespace
• Manage Leases cluster-wide
• Manage Leases in kube-system or kube-node-lease namespace
• Manage Ingresses (Namespace Service Exposure/Traffic Redirection)

📦 Workloads (1)