bind a resource to a resource
integration-operator
v1.2.0
5 Critical
1 High
1 Medium
9 Low
1
1
16
RBAC Atlas is a curated database of identities and the Role Based Access Control (RBAC) policies associated with them in popular Kubernetes open-source projects. Each entry includes security annotations that highlight granted permissions, potential risks, and possible abuse scenarios.
Why is RBAC important? RBAC is the final layer of defense in Kubernetes security. If workloads are compromised and an identity is stolen, a misconfigured or overly permissive RBAC policy (common with Operators) can enable attackers to move laterally within your cluster, potentially leading to a complete Kubernetes cluster takeover.
RBAC Atlas is a collaborative project created by Lenin Alevski, and contributions of additional RBAC rules are welcome. Check out the source on GitHub: rbac-scope (the CLI tool) and rbac-atlas (this website).
🚀 Top Risks
📦 Top Categories
monitoring operator prometheus kubernetes metric database cluster alerting gitops argoproj kube-prometheus observability argocd storage sql gitlab metrics http php web See All →
📜 All Projects
istiod
v1.29.1
5 Critical
20 High
7 Medium
48 Low
2
1
80
Helm chart for istio control plane
jaeger
v4.5.0 1
1
0
A Jaeger Helm chart for Kubernetes
jaeger-operator
v2.57.0
2 Critical
8 High
1 Medium
22 Low
1
1
33
jaeger-operator Helm chart for Kubernetes
jaeger-operator
v2.57.0
2 Critical
8 High
1 Medium
22 Low
1
1
33
jaeger-operator Helm chart for Kubernetes
jenkins
v5.9.8
2 High
2 Medium
2 Low
1
2
6
Jenkins - Build great things at any scale! As the leading open source automation server, Jenkins provides over 2000 plugins to support building, deploying and automating any project.
jira
v2.0.9 1
2
0
A chart for installing Jira Data Center on Kubernetes
k10
v8.5.4
16 Critical
145 High
6 Medium
85 Low
21
19
252
Kasten’s K10 Data Management Platform
k8gb
v0.18.1
4 High
25 Low
3
3
29
A Helm chart for Kubernetes Global Balancer
k8s-watcher
v1.18.17
14 Critical
3 High
9 Medium
61 Low
1
1
87
Watches and sends kubernetes resource-related events
k8sgpt-operator
v0.2.25
3 Critical
1 High
2 Medium
5 Low
2
2
11
Automatic SRE Superpowers within your Kubernetes cluster
k8up
v4.8.6
2 Critical
1 Medium
37 Low
2
2
40
Kubernetes and OpenShift Backup Operator based on restic
kafka
v32.4.3 2
1
0
Apache Kafka is a distributed streaming platform designed to build real-time pipelines and can be used as a message broker or as a replacement for a log aggregation solution for big data applications.
kafka-operator
v0.3.0
3 Critical
3 High
5 Low
1
1
11
The Kubedoop operator for Apache Kafka
kamaji-etcd
v0.15.0
4 Low
1
2
4
Helm chart for deploying a multi-tenant etcd cluster.
keda
v2.19.0
4 Critical
4 High
1 Medium
37 Low
4
3
46
Event-based autoscaler for workloads on Kubernetes
keptn
v0.11.0
4 Critical
6 High
2 Medium
61 Low
4
3
73
A Helm chart for Keptn, a set of tools to enable cloud-native application lifecycle management
keptn-cert-manager
v0.3.0
2 Critical
1 High
2 Medium
4 Low
1
1
9
A Helm chart for Keptn Certificate Manager, a subproject of Keptn
keptn-lifecycle-operator
v0.6.0
1 Critical
2 High
45 Low
1
1
48
A Helm chart for Keptn Lifecycle Operator, a subproject of Keptn
keptn-metrics-operator
v0.5.0
1 Critical
3 High
12 Low
2
1
16
A Helm chart for Keptn Metrics Operator, a subproject of Keptn
keycloak
v25.2.0 2
2
0
Keycloak is a high performance Java-based identity and access management solution. It lets developers add an authentication layer to their applications with minimum effort.
keycloak-operator
v1.11.2 1
1
0
Deploy Keycloak Operator and Keycloak
keycloak-operator
v1.32.0
1 Low
1
1
1
A Helm chart for KubeRocketCI Keycloak Operator
keycloak-operator
v1.33.0-SNAPSHOT.11
1 Low
1
1
1
A Helm chart for KubeRocketCI Keycloak Operator
keycloak-operator
v0.1.2
1 Low
1
1
1
Keycloak is an open source software product to allow single sign-on with identity and access management
kibana
v8.5.1
2 Low
2
1
2
Official Elastic helm chart for Kibana
komodor-agent
v2.16.1-RC1
17 Critical
6 High
5 Medium
72 Low
2
2
100
Watches and sends kubernetes resource-related events
kong
v3.1.0
2 Critical
2 High
62 Low
1
1
66
The Cloud-Native Ingress and API-management
kuadrant-operator
v1.4.2
21 Critical
9 High
4 Medium
94 Low
6
4
128
The Operator to install and manage the lifecycle of the Kuadrant components deployments.
kube-prometheus-stack
v62.7.0
5 Critical
20 High
3 Medium
46 Low
9
7
74
kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
kube-prometheus-stack
v82.10.3
5 Critical
25 High
3 Medium
44 Low
8
6
77
kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
kube-state-metrics
v7.2.0
1 Critical
1 High
3 Medium
23 Low
1
1
28
Install kube-state-metrics to generate and expose cluster-level metrics
kubernetes-dashboard
v7.14.0
9 Critical
2 High
4 Medium
87 Low
11
13
102
General-purpose web UI for Kubernetes clusters
kubestash-operator
v0.26.0
9 Critical
15 High
26 Low
2
2
50
KubeStash, Kubernetes native backup operator by AppsCode
kubevault-operator
v0.24.0-rc.0
7 Critical
11 High
2 Medium
14 Low
1
1
34
KubeVault Operator by AppsCode - HashiCorp Vault operator for Kubernetes
kubevious
v1.2.2
1 Critical
2 Low
2
3
3
A Helm chart for Kubevious
kured
v5.11.0
7 Low
1
1
7
A Helm chart for kured
kyverno
v3.7.1-rc.1
4 Critical
3 High
2 Medium
36 Low
7
8
45
Kubernetes Native Policy Management
lightrun-k8s-operator
v0.3.18
3 Critical
1 High
6 Low
1
1
10
A Helm chart for Lightrun k8s operator
limitador-operator
v0.18.0-dev01
6 Critical
1 High
1 Medium
7 Low
1
1
15
Kubernetes operator for managing Limitador instances, a rate limiting service to protect your APIs.
linkerd-control-plane
v2026.3.2
2 Critical
1 Medium
52 Low
4
4
55
Linkerd gives you observability, reliability, and security for your microservices — with no code change required.
linkerd-viz
v30.12.11
1 Critical
1 High
61 Low
6
6
63
The Linkerd-Viz extension contains observability and visualization components for Linkerd.
linkerd-viz
v2026.3.2
1 Critical
1 High
61 Low
6
6
63
The Linkerd-Viz extension contains observability and visualization components for Linkerd.
linkerd2
v2.11.5
1 Medium
33 Low
4
4
34
DEPRECATED: Use linkerd-crds and linkerd-control-plane for Linkerd 2.12.0 and later (see https://linkerd.io/2.12/tasks/upgrade/#upgrading-to-2-12-0-using-helm) - Linkerd gives you observability, reliability, and security for your microservices — with no code change required.
listener-operator
v0.3.0
6 Critical
2 High
2 Medium
33 Low
3
3
43
The Kubedoop Listener Operator
logstash
v8.5.1 0
1
0
Official Elastic helm chart for Logstash
loki
v6.55.0
9 Critical
1 High
2 Medium
26 Low
6
6
38
Helm chart for Grafana Loki and Grafana Enterprise Logs supporting monolithic, simple scalable, and microservices modes.
loki-simple-scalable
v1.8.11
9 Critical
1 Medium
33 Low
6
4
43
Helm chart for Grafana Loki in simple, scalable mode
longhorn
v1.11.0
11 Critical
65 High
11 Medium
21 Low
3
2
108
Longhorn is a distributed block storage system for Kubernetes.
mariadb
v25.0.1 1
1
0
MariaDB is an open source, community-developed SQL database server that is widely in use around the world due to its enterprise features, flexibility, and collaboration with leading tech firms.