RBAC Atlas is a curated database of identities and the Role Based Access Control (RBAC) policies associated with them in popular Kubernetes open-source projects. Each entry includes security annotations that highlight granted permissions, potential risks, and possible abuse scenarios.

Why is RBAC important? RBAC is the final layer of defense in Kubernetes security. If workloads are compromised and an identity is stolen, a misconfigured or overly permissive RBAC policy (common with Operators) can enable attackers to move laterally within your cluster, potentially leading to a complete Kubernetes cluster takeover.

RBAC Atlas is a collaborative project created by Lenin Alevski, and contributions of additional RBAC rules are welcome. Check out the source on GitHub: rbac-scope (the CLI tool) and rbac-atlas (this website).

🚀 Top Risks

informationdisclosure dataexposure configmapaccess reconnaissance credentialaccess secretaccess clusterstructure tampering potentialprivilegeescalation clusterwidesecretaccess See All →

📦 Top Categories

monitoring operator prometheus kubernetes metric database cluster alerting gitops argoproj kube-prometheus observability argocd storage sql gitlab metrics http php web See All →

📜 All Projects

All A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

wordpress

v29.2.4
3 3 0

WordPress is the world’s most popular blogging and content management platform. Powerful yet simple, everyone from students to global corporations use it to build beautiful, functional websites.

yugaware

v2025.2.2
4 Critical 2 High 1 Medium 12 Low 1 2 19

YugabyteDB Anywhere provides deployment, orchestration, and monitoring for managing YugabyteDB clusters. YugabyteDB Anywhere can create a YugabyteDB cluster with multiple pods provided by Kubernetes or OpenShift and logically grouped together to form one logical distributed database.

#AuthorizationBypass  #ClusterAdminAccess  #ClusterWideAccess  (+21 more)

yugaware-openshift

v2025.2.2
1 2 0

YugabyteDB Anywhere provides deployment, orchestration, and monitoring for managing YugabyteDB clusters. YugabyteDB Anywhere can create a YugabyteDB cluster with multiple pods provided by Kubernetes or OpenShift and logically grouped together to form one logical distributed database.