Description

A Helm chart for installing Hazelcast Platform Operator which automates common management tasks such as configuring, creating, scaling, and recovering Hazelcast clusters on Kubernetes and Red Hat OpenShift. By taking care of manual deployment and life-cycle management, Hazelcast Platform Operator makes it simpler to work with Hazelcast clusters.

Overview

IdentityNamespaceAutomountSecretsPermissionsWorkloadsRisk
hazelcast-platform-operatordefault521Critical

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.


Identities

🤖 hazelcast-platform-operator

Namespace: default  |  Automount:

🔑 Permissions (52)

RoleResourceVerbsRiskTags
ClusterRole hazelcast-platform-operatorrbac.authorization.k8s.io/clusterrolebindingscreate · delete · get · list · patch · update · watchCriticalBindingToPrivilegedRole ClusterAdminAccess InformationDisclosure PrivilegeEscalation RBACManipulation (+2 more)
ClusterRole hazelcast-platform-operatorrbac.authorization.k8s.io/clusterrolescreate · delete · get · list · patch · update · watchCriticalClusterAdminAccess InformationDisclosure PrivilegeEscalation RBACManipulation RBACQuery (+1 more)
Role hazelcast-platform-operatorcore/secretscreate · get · list · watchCriticalCredentialAccess DataExposure InformationDisclosure SecretAccess
Role hazelcast-platform-operatorcore/configmapscreate · delete · get · list · patch · update · watchHighConfigMapAccess DataExposure InformationDisclosure PotentialPrivilegeEscalation Tampering
Role hazelcast-platform-operatorcore/podscreate · delete · get · list · patch · update · watchHighLateralMovement Persistence PotentialPrivilegeEscalation Tampering WorkloadExecution
Role hazelcast-platform-operatorrbac.authorization.k8s.io/rolebindingscreate · delete · get · list · patch · update · watchHighBindingToPrivilegedRole PrivilegeEscalation RBACManipulation
Role hazelcast-platform-operatorrbac.authorization.k8s.io/rolescreate · delete · get · list · patch · update · watchHighPrivilegeEscalation RBACManipulation
Role hazelcast-platform-operatorcore/servicescreate · delete · get · list · patch · update · watchHighDenialOfService NetworkManipulation ServiceExposure Tampering
Role hazelcast-platform-operatorapps/statefulsetscreate · delete · get · list · patch · update · watchHighPersistence PotentialPrivilegeEscalation Tampering WorkloadLifecycle
Role hazelcast-platform-operatorcore/serviceaccountscreate · delete · get · list · patch · update · watchMediumIdentityManagement PotentialPrivilegeEscalation Tampering
ClusterRole hazelcast-platform-operatoradmissionregistration.k8s.io/validatingwebhookconfigurationsget · list · update · watchMediumInformationDisclosure Reconnaissance WebhookReconnaissance
Role hazelcast-platform-operatorhazelcast.com/cachescreate · delete · get · list · patch · update · watchLow
Role hazelcast-platform-operatorhazelcast.com/caches/finalizersupdateLow
Role hazelcast-platform-operatorhazelcast.com/caches/statusget · patch · updateLow
Role hazelcast-platform-operatorhazelcast.com/cronhotbackupscreate · delete · get · list · patch · update · watchLow
Role hazelcast-platform-operatorhazelcast.com/cronhotbackups/finalizersupdateLow
Role hazelcast-platform-operatorhazelcast.com/cronhotbackups/statusget · patch · updateLow
Role hazelcast-platform-operatorapps/deploymentsgetLow
ClusterRole hazelcast-platform-operatorcore/endpointsget · listLow
Role hazelcast-platform-operatorcore/eventscreate · delete · get · list · patch · update · watchLow
Role hazelcast-platform-operatorhazelcast.com/hazelcastscreate · delete · get · list · patch · update · watchLow
Role hazelcast-platform-operatorhazelcast.com/hazelcasts/finalizersupdateLow
Role hazelcast-platform-operatorhazelcast.com/hazelcasts/statusget · patch · updateLow
Role hazelcast-platform-operatorhazelcast.com/hotbackupscreate · delete · get · list · patch · update · watchLow
Role hazelcast-platform-operatorhazelcast.com/hotbackups/finalizersupdateLow
Role hazelcast-platform-operatorhazelcast.com/hotbackups/statusget · patch · updateLow
Role hazelcast-platform-operatorhazelcast.com/managementcenterscreate · delete · get · list · patch · update · watchLow
Role hazelcast-platform-operatorhazelcast.com/managementcenters/finalizersupdateLow
Role hazelcast-platform-operatorhazelcast.com/managementcenters/statusget · patch · updateLow
Role hazelcast-platform-operatorhazelcast.com/mapscreate · delete · get · list · patch · update · watchLow
Role hazelcast-platform-operatorhazelcast.com/maps/finalizersupdateLow
Role hazelcast-platform-operatorhazelcast.com/maps/statusget · patch · updateLow
Role hazelcast-platform-operatorhazelcast.com/multimapscreate · delete · get · list · patch · update · watchLow
Role hazelcast-platform-operatorhazelcast.com/multimaps/finalizersupdateLow
Role hazelcast-platform-operatorhazelcast.com/multimaps/statusget · patch · updateLow
ClusterRole hazelcast-platform-operatorcore/nodesget · listLow
ClusterRole hazelcast-platform-operatorcore/podsget · listLow
Role hazelcast-platform-operatorhazelcast.com/queuescreate · delete · get · list · patch · update · watchLow
Role hazelcast-platform-operatorhazelcast.com/queues/finalizersupdateLow
Role hazelcast-platform-operatorhazelcast.com/queues/statusget · patch · updateLow
Role hazelcast-platform-operatorhazelcast.com/replicatedmapscreate · delete · get · list · patch · update · watchLow
Role hazelcast-platform-operatorhazelcast.com/replicatedmaps/finalizersupdateLow
Role hazelcast-platform-operatorhazelcast.com/replicatedmaps/statusget · patch · updateLow
ClusterRole hazelcast-platform-operatorsecurity.openshift.io/securitycontextconstraintsuseLow
ClusterRole hazelcast-platform-operatorcore/servicesget · listLow
ClusterRole hazelcast-platform-operatorapps/statefulsetslist · watchLow
Role hazelcast-platform-operatorhazelcast.com/topicscreate · delete · get · list · patch · update · watchLow
Role hazelcast-platform-operatorhazelcast.com/topics/finalizersupdateLow
Role hazelcast-platform-operatorhazelcast.com/topics/statusget · patch · updateLow
Role hazelcast-platform-operatorhazelcast.com/wanreplicationscreate · delete · get · list · patch · update · watchLow
Role hazelcast-platform-operatorhazelcast.com/wanreplications/finalizersupdateLow
Role hazelcast-platform-operatorhazelcast.com/wanreplications/statusget · patch · updateLow

⚠️ Potential Abuse (15)

The following security risks were found based on the above permissions:

📦 Workloads (1)

KindNameContainerImage
Deploymenthazelcast-platform-operatormanagerhazelcast/hazelcast-platform-operator:5.6