Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[EPIC] Expand base commands set #10

Open
marcinc opened this issue Mar 9, 2020 · 0 comments
Open

[EPIC] Expand base commands set #10

marcinc opened this issue Mar 9, 2020 · 0 comments
Labels
CLI Command line related

Comments

@marcinc
Copy link
Contributor

marcinc commented Mar 9, 2020

This is to cover further RBAC inspection. The list below is just an indicator and some ideas around how to make it come complete (individual commands will link to separate issues):

  • unused - "unused" command #11 - Unused ClusterRole, ClusterRoleBinding, Role, RoleBinding
  • multi-binding - "multi-binding" command #12 - Show all roles for given subject and highlight those with multiple bindings for the same role.
  • risky-roles - "risky-roles" command #13 - List Roles/ClusterRoles for Subject (user, group or service account) with a SCOPE (Cluster-Wide/NS)
  • risky-subjects - "risky-subjects" command #14 - Identify risky Subjects (Users, Groups and ServiceAccounts)
  • roles - "roles" command #15 - List Roles/ClusterRoles for Subject (user, group or service account) with a SCOPE (Cluster-Wide/NS). Alternatively split command into users/serviceaccounts/groups?
  • permissions - "permissions" command #16 - List Rules (compiled permissions) for given Subject (user, group, sa) in scanned Kubernetes cluster - scoped by Cluster-Wide/NS?
@marcinc marcinc changed the title [EPIC] Expand base commands set [EPIC] [CLI] Expand base commands set Mar 9, 2020
@marcinc marcinc added the CLI Command line related label Mar 9, 2020
@marcinc marcinc changed the title [EPIC] [CLI] Expand base commands set [EPIC] Expand base commands set Mar 9, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CLI Command line related
Projects
None yet
Development

No branches or pull requests

1 participant