secret-operator

Description

The Kubedoop Secret Operator

Overview

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.

Identities

🤖 secret-operator-csi

Namespace: default  |  Automount: ❌

🔑 Permissions (15)

⚠️ Potential Abuse (11)

The following security risks were found based on the above permissions:

• Create pods cluster-wide
• Create pods in a namespace
• Update/Patch pods cluster-wide
• Update/Patch pods in a namespace
• Read secrets cluster-wide
• Read secrets in a namespace
• Read ConfigMaps in a namespace
• Modify ConfigMaps in a namespace
• Read events cluster-wide
• Manage Leases in kube-system or kube-node-lease namespace

📦 Workloads (6)

🤖 secret-operator

Namespace: default  |  Automount: ❌

🔑 Permissions (3)

⚠️ Potential Abuse (4)

The following security risks were found based on the above permissions:

• Read ConfigMaps in a namespace
• Modify ConfigMaps in a namespace
• Manage Leases in kube-system or kube-node-lease namespace

📦 Workloads (0)

No workloads use this ServiceAccount.

🤖 secret-operator-ds-check

Namespace: default  |  Automount: ❌

🔑 Permissions (1)

⚠️ Potential Abuse (1)

The following security risks were found based on the above permissions:

📦 Workloads (1)