3 Service Accounts
3 Workloads
3 Bindings
3 Low
Description
Grafana Mimir
Overview
| Identity | Namespace | Automount | Secrets | Permissions | Workloads | Risk |
|---|---|---|---|---|---|---|
mimir-distributed-minio-update-prometheus-secret | default | ❌ | — | 3 | 0 | Low |
mimir-distributed | default | ❌ | — | 0 | 10 | — |
mimir-distributed-minio | default | ❌ | — | 0 | 2 | — |
Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.
Identities
🤖 mimir-distributed-minio-update-prometheus-secret
Namespace: default | Automount: ❌
🔑 Permissions (3)
| Role | Resource | Verbs | Risk | Tags |
|---|---|---|---|---|
Role mimir-distributed-minio-update-prometheus-secret | core/secrets | create | Low | |
Role mimir-distributed-minio-update-prometheus-secret | monitoring.coreos.com/servicemonitors (restricted to: mimir-distributed-minio) | get | Low | ResourceNameRestricted |
Role mimir-distributed-minio-update-prometheus-secret | core/secrets (restricted to: mimir-distributed-minio-prometheus) | create · get · patch · update | Low | ResourceNameRestricted |
⚠️ Potential Abuse (1)
The following security risks were found based on the above permissions:
📦 Workloads (0)
No workloads use this ServiceAccount.
🤖 mimir-distributed
Namespace: default | Automount: ❌
🔑 Permissions (0)
No explicit RBAC bindings.
📦 Workloads (10)
| Kind | Name | Container | Image |
|---|---|---|---|
| Deployment | mimir-distributed-distributor | distributor | grafana/mimir:2.0.0 |
| Deployment | mimir-distributed-nginx | nginx | docker.io/nginxinc/nginx-unprivileged:1.19-alpine |
| Deployment | mimir-distributed-overrides-exporter | overrides-exporter | grafana/mimir:2.0.0 |
| Deployment | mimir-distributed-querier | querier | grafana/mimir:2.0.0 |
| Deployment | mimir-distributed-query-frontend | query-frontend | grafana/mimir:2.0.0 |
| Deployment | mimir-distributed-ruler | ruler | grafana/mimir:2.0.0 |
| StatefulSet | mimir-distributed-alertmanager | alertmanager | grafana/mimir:2.0.0 |
| StatefulSet | mimir-distributed-compactor | compactor | grafana/mimir:2.0.0 |
| StatefulSet | mimir-distributed-ingester | ingester | grafana/mimir:2.0.0 |
| StatefulSet | mimir-distributed-store-gateway | store-gateway | grafana/mimir:2.0.0 |
🤖 mimir-distributed-minio
Namespace: default | Automount: ❌
🔑 Permissions (0)
No explicit RBAC bindings.
📦 Workloads (2)
| Kind | Name | Container | Image |
|---|---|---|---|
| Deployment | mimir-distributed-minio | minio | minio/minio:RELEASE.2021-02-14T04-01-33Z |
| Job | mimir-distributed-minio-make-bucket-job | minio-mc | minio/mc:RELEASE.2021-02-14T04-28-06Z |