Description

VictoriaMetrics Operator

Overview

IdentityNamespaceAutomountSecretsPermissionsWorkloadsRisk
victoria-metrics-operatordefault1031Critical

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.


Identities

🤖 victoria-metrics-operator

Namespace: default  |  Automount:

🔑 Permissions (103)

RoleResourceVerbsRiskTags
ClusterRole victoria-metrics-operatorrbac.authorization.k8s.io/clusterrolebindings*CriticalBindingToPrivilegedRole ClusterAdminAccess ClusterWideAccess InformationDisclosure PrivilegeEscalation (+4 more)
ClusterRole victoria-metrics-operatorrbac.authorization.k8s.io/clusterroles*CriticalBindingToPrivilegedRole ClusterAdminAccess ClusterWideAccess InformationDisclosure PrivilegeEscalation (+4 more)
ClusterRole victoria-metrics-operatorcore/configmaps*CriticalClusterWideAccess ConfigMapAccess DataExposure InformationDisclosure PotentialPrivilegeEscalation (+2 more)
ClusterRole victoria-metrics-operatorapps/daemonsets*CriticalClusterWideAccess NodeAccess Persistence PrivilegeEscalation Tampering (+2 more)
ClusterRole victoria-metrics-operatorapps/deployments*CriticalClusterWideAccess Persistence PotentialPrivilegeEscalation PrivilegeEscalation Tampering (+2 more)
ClusterRole victoria-metrics-operatorcore/endpoints*CriticalClusterWideAccess DenialOfService ManInTheMiddle NetworkManipulation Tampering (+2 more)
ClusterRole victoria-metrics-operatorcore/pods*CriticalClusterWideAccess LateralMovement Persistence PotentialPrivilegeEscalation PrivilegeEscalation (+3 more)
ClusterRole victoria-metrics-operatorcore/secrets*CriticalClusterWideAccess ClusterWideSecretAccess CredentialAccess DataExposure InformationDisclosure (+6 more)
ClusterRole victoria-metrics-operatorcore/serviceaccounts*CriticalClusterAdminAccess ClusterWideAccess IdentityManagement Impersonation PotentialPrivilegeEscalation (+4 more)
ClusterRole victoria-metrics-operatorcore/services*CriticalClusterWideAccess DenialOfService NetworkManipulation ServiceExposure Tampering (+1 more)
ClusterRole victoria-metrics-operatorapps/statefulsets*CriticalClusterWideAccess Persistence PotentialPrivilegeEscalation PrivilegeEscalation Tampering (+2 more)
ClusterRole victoria-metrics-operatormonitoring.coreos.com/**HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorrbac.authorization.k8s.io/clusterrolebindings/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorrbac.authorization.k8s.io/clusterroles/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorcore/configmaps/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorapps/daemonsets/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorapps/deployments/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorautoscaling/horizontalpodautoscalers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatornetworking.k8s.io/ingresses*HighClusterWideAccess DenialOfService NetworkManipulation ServiceExposure Tampering (+1 more)
ClusterRole victoria-metrics-operatornetworking.k8s.io/ingresses/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorcore/persistentvolumeclaims*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorcore/persistentvolumeclaims/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorpolicy/poddisruptionbudgets/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorapps/replicasets*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorrbac.authorization.k8s.io/rolebindings*HighBindingToPrivilegedRole ClusterWideAccess InformationDisclosure PrivilegeEscalation RBACManipulation (+3 more)
ClusterRole victoria-metrics-operatorrbac.authorization.k8s.io/roles*HighClusterWideAccess InformationDisclosure PrivilegeEscalation RBACManipulation RBACQuery (+2 more)
ClusterRole victoria-metrics-operatorcore/secrets/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorcore/serviceaccounts/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorcore/services/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorapps/statefulsets/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorapps/statefulsets/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vlclusters*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vlclusters/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vlclusters/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vlogs*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vlogs/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vlogs/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vlsingles*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vlsingles/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vlsingles/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmagents*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmagents/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmagents/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmalertmanagerconfigs*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmalertmanagerconfigs/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmalertmanagerconfigs/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmalertmanagers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmalertmanagers/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmalertmanagers/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmalerts*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmalerts/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmalerts/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmanomalies*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmanomalies/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmanomalies/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmauths*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmauths/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmauths/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmclusters*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmclusters/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmclusters/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmnodescrapes*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmnodescrapes/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmnodescrapes/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmpodscrapes*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmpodscrapes/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmpodscrapes/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmprobes*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmprobes/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmprobes/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmrules*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmrules/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmrules/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmscrapeconfigs*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmscrapeconfigs/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmscrapeconfigs/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmservicescrapes*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmservicescrapes/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmservicescrapes/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmsingles*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmsingles/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmsingles/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmstaticscrapes*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmstaticscrapes/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmstaticscrapes/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmusers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmusers/finalizers*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatoroperator.victoriametrics.com/vmusers/status*HighClusterWideAccess WildcardPermission
ClusterRole victoria-metrics-operatorcore/events*MediumClusterWideAccess InformationDisclosure OperationalData Reconnaissance WildcardPermission
ClusterRole victoria-metrics-operatorpolicy/poddisruptionbudgets*MediumAvailabilityImpact ClusterWideAccess DenialOfService Tampering WildcardPermission
ClusterRole victoria-metrics-operatorcore/configmaps/statusget · list · watchLow
ClusterRole victoria-metrics-operatorapiextensions.k8s.io/customresourcedefinitionsget · listLow
ClusterRole victoria-metrics-operatordiscovery.k8s.io/endpointslicesget · list · watchLow
Role victoria-metrics-operatorcoordination.k8s.io/leasescreate · get · updateLow
ClusterRole victoria-metrics-operatorcore/namespacesget · list · watchLowClusterStructure InformationDisclosure Reconnaissance
ClusterRole victoria-metrics-operatorcore/nodesget · list · watchLow
ClusterRole victoria-metrics-operatorcore/nodes/metricsget · list · watchLow
ClusterRole victoria-metrics-operatorcore/nodes/proxyget · list · watchLow
ClusterRole victoria-metrics-operatorimage.openshift.io/registry/metricsgetLow
ClusterRole victoria-metrics-operatorroute.openshift.io/registry/metricsgetLow
ClusterRole victoria-metrics-operatorimage.openshift.io/routers/metricsgetLow
ClusterRole victoria-metrics-operatorroute.openshift.io/routers/metricsgetLow
ClusterRole victoria-metrics-operatorstorage.k8s.io/storageclassesget · list · watchLow

⚠️ Potential Abuse (38)

The following security risks were found based on the above permissions:

📦 Workloads (1)

KindNameContainerImage
Deploymentvictoria-metrics-operatoroperatorvictoriametrics/operator:v0.60.2