kuadrant-operator

Description

The Operator to install and manage the lifecycle of the Kuadrant components deployments.

• https://github.com/Kuadrant/kuadrant-operator/

Overview

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.

Identities

kuadrant-operator-controller-manager

Namespace: default  |  Automount:

Permissions (111)

Potential Abuse (23)

The following security risks were found based on the above permissions:

• Read ConfigMaps cluster-wide
• Read ConfigMaps in a namespace
• Modify ConfigMaps cluster-wide
• Modify ConfigMaps in a namespace
• Manage Roles in a namespace (create, update, patch, delete)
• Manage RoleBindings in a namespace (create, update, patch, delete)
• Escalate privileges via ClusterRoles (escalate verb)
• Bind ClusterRoles to identities (bind verb)
• Manage Deployments cluster-wide (potential for privileged pod execution)
• Manage Deployments in a namespace (potential for privileged pod execution)
• Create TokenReviews (validate arbitrary tokens)
• Create SubjectAccessReviews (check arbitrary permissions)
• Manage ServiceAccounts cluster-wide
• Manage ServiceAccounts in a namespace
• Manage NetworkPolicies cluster-wide
• Manage NetworkPolicies in a namespace
• Manage Services cluster-wide
• Manage Services in a namespace
• Read RBAC configuration cluster-wide
• Manage Leases cluster-wide
• Manage Leases in kube-system or kube-node-lease namespace
• List Namespaces (Cluster Reconnaissance)

Workloads (1)