keda

Description

Event-based autoscaler for workloads on Kubernetes

• https://github.com/kedacore/keda

Overview

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.

Identities

🤖 keda-operator

Namespace: default  |  Automount: ✅

🔑 Permissions (38)

⚠️ Potential Abuse (13)

The following security risks were found based on the above permissions:

• Read pod logs cluster-wide
• Read pod logs in a namespace
• Read ConfigMaps cluster-wide
• Read ConfigMaps in a namespace
• Manage Jobs cluster-wide (one-off privileged execution)
• Manage Jobs in a namespace (one-off privileged execution)
• Manage Leases in kube-system or kube-node-lease namespace
• List ValidatingWebhookConfigurations (Reconnaissance)
• Read LimitRanges (Namespace Information Disclosure)
• Update Deployment Scale (Resource Abuse/DoS)
• Update StatefulSet Scale (Resource Abuse/DoS)

📦 Workloads (1)

🤖 keda-webhook

Namespace: default  |  Automount: ✅

🔑 Permissions (5)

⚠️ Potential Abuse (1)

The following security risks were found based on the above permissions:

📦 Workloads (1)

🤖 keda-metrics-server

Namespace: default  |  Automount: ✅

🔑 Permissions (0)

No explicit RBAC bindings.

📦 Workloads (1)