virtualcluster

Description

A virtual kubernetes cluster

Overview

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.

Identities

🤖 vc-virtualcluster

Namespace: default  |  Automount: ❌

🔑 Permissions (16)

⚠️ Potential Abuse (15)

The following security risks were found based on the above permissions:

• Namespaced pod exec
• Namespaced pod attach
• Namespaced pod port-forward
• Create pods in a namespace
• Update/Patch pods in a namespace
• Read secrets in a namespace
• Modify secrets in a namespace
• Read pod logs in a namespace
• Read ConfigMaps in a namespace
• Modify ConfigMaps in a namespace
• Manage Endpoints or EndpointSlices in a namespace
• Manage Services in a namespace
• Manage Ingresses (Namespace Service Exposure/Traffic Redirection)

📦 Workloads (2)