trident-operator

Description

A Helm chart for deploying NetApp’s Trident CSI storage provisioner using the Trident Operator.

Overview

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.

Identities

🤖 trident-operator

Namespace: default  |  Automount: ❌

🔑 Permissions (139)

⚠️ Potential Abuse (21)

The following security risks were found based on the above permissions:

• Cluster-wide pod exec
• Namespaced pod exec
• Create pods cluster-wide
• Create pods in a namespace
• Update/Patch pods cluster-wide
• Update/Patch pods in a namespace
• Read secrets cluster-wide
• Read secrets in a namespace
• Modify secrets cluster-wide
• Modify secrets in a namespace
• Read pod logs cluster-wide
• Read pod logs in a namespace
• Manage CustomResourceDefinitions
• Manage CSIDrivers (potential node compromise)
• Manage StorageClasses
• Read events cluster-wide
• Use privileged PodSecurityPolicy (deprecated)
• Read ResourceQuotas (Namespace Information Disclosure)
• Read All ResourceQuotas (Cluster-wide Information Disclosure)
• Read CSINode Objects (Node & Storage Reconnaissance)

📦 Workloads (1)