← ALL NOTES
Kubernetes

k8s-rbac-wildcard-audit — name the RBAC rules that are cluster-admin with extra steps

Static audit of Kubernetes Role and ClusterRole manifests for wildcard verbs, wildcard resources and the handful of rules that quietly grant cluster admin.

Loading…