vault-secrets-operator

Description

Official Vault Secrets Operator Chart

• https://github.com/hashicorp/vault-secrets-operator

Overview

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.

Identities

🤖 vault-secrets-operator-controller-manager

Namespace: default  |  Automount: ❌

🔑 Permissions (41)

⚠️ Potential Abuse (11)

The following security risks were found based on the above permissions:

• Read secrets cluster-wide
• Read secrets in a namespace
• Modify secrets cluster-wide
• Modify secrets in a namespace
• Read ConfigMaps cluster-wide
• Read ConfigMaps in a namespace
• Modify ConfigMaps in a namespace
• Create TokenReviews (validate arbitrary tokens)
• Create SubjectAccessReviews (check arbitrary permissions)
• Manage Leases in kube-system or kube-node-lease namespace

📦 Workloads (3)

🤖 vault-secrets-operator-upgrade-crds

Namespace: default  |  Automount: ❌

🔑 Permissions (1)

⚠️ Potential Abuse (2)

The following security risks were found based on the above permissions:

• Manage CustomResourceDefinitions

📦 Workloads (1)