linkerd-control-plane

Description

Linkerd gives you observability, reliability, and security for your microservices — with no code change required.

• https://github.com/linkerd/linkerd2/

Overview

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.

Identities

🤖 linkerd-destination

Namespace: default  |  Automount: ❌

🔑 Permissions (34)

⚠️ Potential Abuse (4)

The following security risks were found based on the above permissions:

• Read secrets in a namespace
• Manage Endpoints or EndpointSlices cluster-wide
• Manage Endpoints or EndpointSlices in a namespace

📦 Workloads (4)

🤖 linkerd-identity

Namespace: default  |  Automount: ❌

🔑 Permissions (2)

⚠️ Potential Abuse (2)

The following security risks were found based on the above permissions:

• Create TokenReviews (validate arbitrary tokens)

📦 Workloads (2)

🤖 linkerd-proxy-injector

Namespace: default  |  Automount: ❌

🔑 Permissions (16)

⚠️ Potential Abuse (2)

The following security risks were found based on the above permissions:

• List Namespaces (Cluster Reconnaissance)

📦 Workloads (2)

🤖 linkerd-heartbeat

Namespace: default  |  Automount: ❌

🔑 Permissions (3)

⚠️ Potential Abuse (1)

The following security risks were found based on the above permissions:

📦 Workloads (1)